Timeline for How can trusting ONE certificate jeopardize everything I do online?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 29, 2016 at 2:16 | comment | added | techraf | That's a valid point from a user's perspective (and the question actually asks for it). User cedes the responsibly for verification to the proxy. For organizations on the other hand, proxy vendors probably claim they do better job (and are more trustworthy) than individual users. | |
| Mar 29, 2016 at 1:58 | comment | added | reirab | It's also probably worth noting that, in addition to itself being an MitM attack (which could compromise your data if the proxy is compromised,) this method also prevents you from noticing if someone else downstream is MitMing the connection or just outright spoofing the server. It's basically a voluntary hack that completely removes any notion of server authentication from TLS. Otherwise, though, this is a good answer. +1. | |
| Mar 28, 2016 at 22:05 | history | edited | techraf | CC BY-SA 3.0 |
added 84 characters in body
|
| Mar 28, 2016 at 12:43 | history | edited | techraf | CC BY-SA 3.0 |
added 8 characters in body
|
| Mar 28, 2016 at 12:38 | history | edited | techraf | CC BY-SA 3.0 |
added 174 characters in body
|
| Mar 28, 2016 at 12:31 | history | edited | techraf | CC BY-SA 3.0 |
added 174 characters in body
|
| Mar 28, 2016 at 12:24 | history | edited | techraf | CC BY-SA 3.0 |
added 174 characters in body
|
| Mar 28, 2016 at 12:18 | history | answered | techraf | CC BY-SA 3.0 |