Timeline for My school wifi asks to 'trust' a certificate on iPhones. Does this allow them to view SSL traffic?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 1, 2018 at 19:05 | comment | added | Crypt32 | If you are not asked to install Root certificate, then no, school cannot do that. | |
| Feb 1, 2018 at 18:18 | comment | added | BusinessGuy | Could the issuer name be theoretically falsified by the school? | |
| Feb 1, 2018 at 18:03 | comment | added | Crypt32 | "DigiCert SHA2 High Assurance Server CA" is not used in managed PKI scenarios. It is standard SSL CA server. Therefore it is not possible to MITM students. I explained in my answer why phone doesn't trust RADIUS cert even though CA is trusted. | |
| Feb 1, 2018 at 18:01 | comment | added | Shane Andrie | Two things, 1) The reason that the phone doesn't trust the Cert is probably because it'd signed by an Internal CA Managed by DigitCert, and since you don't have that issuer in your trusted connections yet, hence the ask. 2) This still doesn't prevent the school from MITIMing you. Network traffic could run through an SS/TLSL proxy and handle the interaction between the client and the Server. | |
| Feb 1, 2018 at 17:33 | vote | accept | BusinessGuy | ||
| Feb 1, 2018 at 17:32 | history | edited | Crypt32 | CC BY-SA 3.0 |
added 728 characters in body
|
| Feb 1, 2018 at 17:18 | history | answered | Crypt32 | CC BY-SA 3.0 |