Timeline for Could a bad actor get hold of your credential sent via https if you are connect to their fake network?
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 1, 2021 at 10:43 | comment | added | mti2935 | +1. OP, wrt: 'So using the hostile network is safe as long as the admins of the network does not have access to install certificates in your browser' - admins of the network could also compromise a CA in order to create a fake certificate, and therefore not need to compromise the user's device. This is exactly what happened with DigiNotar in 2011. See security.stackexchange.com/questions/230689/… for more info. | |
| Oct 1, 2021 at 6:53 | history | answered | Geir Emblemsvag | CC BY-SA 4.0 |