New answers tagged sslstrip
The only way you can ensure you are secure is if you use a trusted mobile application, such as Chrome, and you see the padlock and HTTPS at the start of the address bar. Note that here you are trusting both Chrome and the domain of the website that is HTTPS. If you're using a third party application that integrates a browser, you are trusting that ...
If I am not mistaken, importing your own SSL certificates is just for the connections which you make to the device's own web interface so that won't help you to accomplish your goal. What you would need to do is: Create your own root CA Make those devices trust your own root certificate Redirect all SSL traffic from those devices to your proxy When a ...
You can use your computer as a proxy server using "Squid" and configure SSL dump by decrypting the traffic, analyze it and re-encrypting it again and send it to its destinations. You will have to import the certificate created by Squid to your connected devices.
The following solution might not scale well, but: Set up BIND or similar DNS resolver server on the host you want to protect Configure it to validate DNSSEC (can take maximum 10 minutes) Configure a software firewall so that only your DNS server can query the upstream DNS servers Optionally use a browser addon which can display the DNSSEC status You can ...
Top 50 recent answers are included