One of the Most Alarming Internet Proposals I've Seen

Re:One of the Most Alarming Internet Proposals I've Seen by rdl on Sunday February 23, 2014 @07:08PM (#7288355)

There are some kinda legitimate uses for this in certain environments -- enterprise DLP, various kinds of filtering, etc. Potentially even caching and stuff on the distant end of really weird network connections (when I go to Mars in ~30y, I'd like to have as much cached as possible, and converted to message-based vs. connection-oriented protocols).

We have good enough workarounds for this right now (putting wildcard CA certs on devices and proxying that way), but they're not awesome. So, if there were a way to keep this from being used for evil, it could make some existing non-evil activities easier.

But, on balance, the risk of evil might be too high.

[ Parent | on HN ]

Re:One of the Most Alarming Internet Proposals I've Seen by JoshTriplett on Sunday February 23, 2014 @09:25PM (#7288778)

There are potentially legitimate (though still sketchy) reasons to MITM HTTPS traffic from a host configured to allow that (for instance, by trusting an organizational CA). There are no legitimate reasons to MITM HTTPS traffic without the host's knowledge.

[ Parent | on HN ]