Skip to main content
14 events
when toggle format what by license comment
May 22, 2023 at 17:13 comment added JamesTheAwesomeDude @user253751 Actually, that's no longer the case. Nowadays, it is at least conceivable to ask someone to install a root certificate into their system without that being tantamount to a request for administrator access.
Apr 20, 2021 at 9:46 answer added Jake Murray timeline score: 1
Feb 15, 2021 at 16:31 comment added Michael - sqlbot @user253751 MITM is not the only reason why trusting a private CA may be required. Organizations commonly have an internal PKI and internal-only systems are issued certificates by the organization's private CA (or a private intermediate). Any machine interoperating with those internal targets needs the private CA's root cert installed and trusted.
Feb 11, 2021 at 7:34 answer added U. Windl timeline score: 0
Feb 11, 2021 at 5:48 comment added Z4-tier So unless someone(company, work, hacker, etc) really tries to impersonate by doing mitm your confusion isn't due to a misunderstanding of the mechanics involved, but a lack of cynicism. Employers, schools, etc... are completely willing to MITM your web traffic, but they will use euphemisms like "SSL inspection" to make it sound a little nicer. It's a major component of BlueCoat and ZScaler product lines, for example.
Feb 10, 2021 at 23:11 history edited Muhammad Umer CC BY-SA 4.0
added 5 characters in body
Feb 10, 2021 at 21:15 comment added user3067860 Previously: security.stackexchange.com/a/67534/144146
Feb 10, 2021 at 21:00 history tweeted twitter.com/StackSecurity/status/1359608092569333764
Feb 10, 2021 at 17:17 answer added hobbs timeline score: 10
Feb 10, 2021 at 12:35 history became hot network question
Feb 10, 2021 at 12:22 answer added gnasher729 timeline score: 15
Feb 10, 2021 at 5:25 vote accept Muhammad Umer
Feb 10, 2021 at 4:45 answer added Steffen Ullrich timeline score: 36
Feb 10, 2021 at 4:20 history asked Muhammad Umer CC BY-SA 4.0