Skip to main content
added 19 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21

Your school wants you to install a certificate associated to a private key they control in order to do MITM interception i.e. so that they might be able to:

  • they might be able to inspect all your TLS communications while you are using their network;
  • (possibly) they might be able to filter/block some communications.

This technique is deployed in many organizations in order to:

  • detect malwares in the network, block attacks;
  • block abuse of the network (eg. leisure, watching series, illegal content, etc.);
  • block NSFW content.

Your school wants you to install a certificate associated to a private key they control so that:

  • they might be able to inspect all your TLS communications while you are using their network;
  • (possibly) they might be able to filter/block some communications.

Your school wants you to install a certificate associated to a private key they control in order to do MITM interception i.e. so that they might be able to:

  • inspect all your TLS communications while you are using their network;
  • filter/block some communications.

This technique is deployed in many organizations in order to:

  • detect malwares in the network, block attacks;
  • block abuse of the network (eg. leisure, watching series, illegal content, etc.);
  • block NSFW content.
added 19 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21

According to the file name (WebScreenWebScreenCert), I assume that we are in case (1). In the rest of this answer, I'm assuming we are in case (1).

According to the file name (WebScreenCert), I assume that we are in case (1). In the rest of this answer, I'm assuming we are in case (1).

According to the file name (WebScreenCert), I assume that we are in case (1). In the rest of this answer, I'm assuming we are in case (1).

added 39 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21

According to the file name (WebScreenCert), we can assume that we are in case (1).

Note: In case (1), you will be able to connect to the Wifi network without installing the certificate but all (or most) websites will be blocked with a "untrusted certificate" error. In case (2), you cannot connect to the Wifi network at all and probably cannot even configure the connection to the Wifi network.

According to the file name (WebScreenCert), I assume that we are in case (1). In the rest of this answer, I'm assuming we are in case (1).

According to the file name (WebScreenCert), we can assume that we are in case (1).

Note: In case (1), you will be able to connect to the Wifi network without installing the certificate but all (or most) websites will be blocked with a "untrusted certificate" error. In case (2), you cannot connect to the Wifi network at all and probably cannot even configure the connection to the Wifi network.

In the rest of this answer, I'm assuming we are in case (1).

Note: In case (1), you will be able to connect to the Wifi network without installing the certificate but all (or most) websites will be blocked with a "untrusted certificate" error. In case (2), you cannot connect to the Wifi network at all and probably cannot even configure the connection to the Wifi network.

According to the file name (WebScreenCert), I assume that we are in case (1). In the rest of this answer, I'm assuming we are in case (1).

added 25 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
edited body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 125 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 125 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 252 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 10 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 1 character in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 364 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 364 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
added 259 characters in body
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading
Source Link
ysdx
  • 2.5k
  • 15
  • 21
Loading