2

I know that TLS MitM can get HTTP/S traffic decrypted when using certificates.

I'm wondering if it has the ability to decrypt the Apple Airdrop protocol as well as it doesn't go through a server and uses WiFi Direct to create a peer-to-peer connection?

Improve this question

1 Answer 1

Reset to default
4

Accoring to this study, in 2019, it was possible to perform TLS MiTM as long as the eavesdropper managed to downgrade the connection somehow.

But it was in 2019. Since the protocol is the property of Apple, Apple might have improved the design of related application and services to further mitigate MiTM possibilities.

Improve this answer
4
  • Thanks, very helpful. I’m more talking about a ‘friendly’ TLS proxy that encrypts and decrypts data before being received at the other end. Basically to prevent ‘evil’ MITM?
    – Buzzer1965
    Commented Nov 1 at 12:53
  • What would be the use case of proxying protocol based on WiFi Direct (why not use another protocol then)? And wouldn't that introduce an even greater attack surface for MiTM to have two unauthenticated connection backed by DIY (by definition unsecure) infrastructure instead of one authenticated connection backed by Apple infrastructure?
    – stitchmeup
    Commented Nov 1 at 14:20
  • Forgive me, as I said I am new to this. I am wondering if it’s even possible. Like if i installed a tls proxy certificate on my iphone which decrypts and them encrypts http data, is it possible for that same certificate to be able to do the same for airdrop data, as they both use TLS?
    – Buzzer1965
    Commented Nov 1 at 15:26
  • According to the study (again, it was in 2019 so might not be actual) unauthorized connection can be encrypted by any certificate. Although, I wouldn't now how to do that in iOS.
    – stitchmeup
    Commented Nov 6 at 7:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .