Skip to main content
Information Security

Return to Question

edited body; edited tags; edited title
Source Link
nobody
nobody
  • 11.6k
  • 2
  • 46
  • 60

Forging sslSSL certificate to the browser

Can aA man in the middle attacker can intercept and forgesend a different certificate  (a self-signed one may be, maybe) to the browser?

. In this case, browser will show warning to the user and doesn't display's the green pad lock near the urlURL.

Even ifIf a single user bypassbypasses the warning, he will he still be prone to thea man in the middle attack?

  • How to overcome this issue? Is it solely left to the end user?

How can this issue be overcome? Is it solely left to the end user?

Forging ssl certificate to the browser

Can a man in the middle attacker intercept and forge a different certificate(a self-signed one may be) to the browser?

In this case, browser will show warning to the user and doesn't display's the green pad lock near the url.

Even if a single user bypass the warning, he will be prone to the man in the middle attack?

  • How to overcome this issue? Is it solely left to the end user?

Forging SSL certificate to the browser

A man in the middle attacker can intercept and send a different certificate  (a self-signed one, maybe) to the browser. In this case, browser will show warning to the user and doesn't display's the green pad lock near the URL.

If a single user bypasses the warning, will he still be prone to a man in the middle attack?

How can this issue be overcome? Is it solely left to the end user?

Source Link
user261381
user261381
  • 13
  • 1

Forging ssl certificate to the browser

Can a man in the middle attacker intercept and forge a different certificate(a self-signed one may be) to the browser?

In this case, browser will show warning to the user and doesn't display's the green pad lock near the url.

Even if a single user bypass the warning, he will be prone to the man in the middle attack?

  • How to overcome this issue? Is it solely left to the end user?