0

A website that contains sources I need for my work has broken HTTPS (certificate signed for a different domain). This makes me think that a MITM attack could be feasible.

As the sources are office documents, I feel that as even less secure.

How can I safely visualize them?

Is "download and then open in Google Docs" an option? Or is the simple act of downloading already at risk?

Improve this question
8
  • You can safely visualize them in a VM. You can use something such as VirtualBox with an ISO of your choice, download the files to the VM and view them there, then when you are done just delete the Virtual Machine (VM). This will prevent any malicious files harming your actual computer
    – nd510
    Mar 15, 2017 at 8:16
  • this assuming they do not detect the VM and do not have an escape method implemented in them, right?
    – Federico
    Mar 15, 2017 at 8:18
  • A site that has a broken HTTPS does not mean that it is malicious the same as a site which has valid HTTPS can serve malicious content. HTTPS only protects the transport against man in the middle attacks but it is no indicator if the content served is malicious or not. Because the OP seems to have a misunderstanding in this regard I marked it as duplicate of a question where this is explained in more detail.
    – Steffen Ullrich
    Mar 15, 2017 at 8:24
  • And in case you are more interested in how to look at potentially malicious content see the many questions about this topic on this site.
    – Steffen Ullrich
    Mar 15, 2017 at 8:28
  • @SteffenUllrich thanks, I will do. (but to clarify, I fear a MITM that could compromise the files en-route)
    – Federico
    Mar 15, 2017 at 8:31

0

Reset to default

Browse other questions tagged .