50
votes
Accepted
Why is the issuer certificate different at my workplace and at home?
Yes, a company doing SSL interception could in theory read all your traffic if you use the company network. Depending on where you live and what kind of contract you have the ability for the company ...
- 208k
40
votes
Accepted
SSL issue captures Facebook app send out traffic
Facebook uses Certificate Pinning which prevents attacks like yours.
What Is Pinning?
Pinning is the process of associating a host with their expected X509 certificate or public key. Once a ...
- 12.6k
39
votes
As a contractor how do I work on multiple client networks without data leakage?
You could use a very small VM for each one, but keep the IDE on the host, not on the guests. Share a folder from the VM to the host, so you use the host and its resources to develop, and use the VM ...
- 55.5k
33
votes
Accepted
Can a VPN Provider MitM my SSL traffic without me noticing?
How does the provider forward the traffic without exposing my IP, but also without breaking the SSL.
SSL is protection (like encryption) on top of TCP which sits on top of IP. The underlying layers (...
- 208k
23
votes
Accepted
My school wifi asks to 'trust' a certificate on iPhones. Does this allow them to view SSL traffic?
It's ok. The certificate you installed and trusted is used to provide you secure authentication against their RADIUS server and prevent you from connecting to rogue RADIUS server. If someone decides ...
- 6,431
17
votes
Accepted
Hide clear SNI when using https
It is not possible to hide the SNI information if the server requires it to serve the proper certificate. There was discussion on encrypting this information in TLS 1.3. But this idea was abandoned ...
- 208k
16
votes
As a contractor how do I work on multiple client networks without data leakage?
If you use a operating system that has support for separate networking namespaces, use that feature to start each VPN client and all applications in a distinct client-namespace.
There are a lot of ...
- 6,011
14
votes
Accepted
If a WAF is compromised, can the adversary view all the traffic in clear text provided WAF uses SSL cert to decrypt it?
Yes, the configuration is as follows:
[client web browser] <--TLS--> [WAF] <--TLS--> [origin web server]
So, the WAF essentially has a 'man in the middle' (MITM) position between the ...
- 24k
11
votes
Accepted
How to mitigate credential disclosure in man in the middle attack
The Secure Remote Password (SRP) protocol can be used to send credentials over an unencrypted network.
You could also require SSL/TLS client authentication which will prevent the proxy from being ...
- 787
10
votes
Why is the issuer certificate different at my workplace and at home?
In addition to scanning for malware, corporate IT also uses TLS intercept for data loss prevention (DLP), eg. making sure you're not sending proprietary documents through your personal e-mail.
In ...
- 1,942
10
votes
Can a VPN Provider MitM my SSL traffic without me noticing?
The short answer is: Your VPN provider can do anything your ISP can do if you're not using a VPN.
This may include breaking TLS, if your browser trusts a root CA, which issued an intermediate ...
- 3,472
10
votes
How can police get someone's search history?
What are the possible ways they can do that?
The main ways police can obtain search records are by:
Looking at local browser history on the suspect's computer (as you mentioned).
Demanding ...
- 67.3k
9
votes
Accepted
Can a man in the middle hear half the HTTPS conversation
No. A cryptographic system that only protected half of the information would just be slightly better than useless.
During the handshake, a symmetric key is exchanged. After the handshake, that ...
- 65.8k
9
votes
Accepted
Can I use CloudFlare if I want to avoid NSA and FISA secret orders?
First of all, just because you use CloudFlare does not mean that the traffic will pass through the US. CloudFlare currently has 102 edges, and requests will be sent to the nearest one. This is what is ...
- 65.8k
9
votes
Accepted
Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1
Did you go through these procedures to get JustTrustMe to bypass the cert pinning -- http://www.welivesecurity.com/2016/09/08/avoid-certificate-pinning-latest-versions-android/ -- ?
If you are just ...
- 19.1k
9
votes
Accepted
How to check Google SSL certificate?
Based on your description and the link you've provided you've likely installed a CA certificate for SSL interception.
... how do I know the certificate I have is legit? That is, actually comes ...
- 208k
9
votes
Can messages be intercepted when in airplane mode?
The way several messaging apps work is the message I send is encrypted when sent to the server, then decrypted, and then sent to the intended client in a decrypted state.
I am unaware of any instant ...
- 11.6k
8
votes
Accepted
Is it acceptable for an employer to install a self-signed root certificate on employees personal devices at home?
This is not a strictly a legal or technical question, but rather an opinion question - "is it acceptable?" Is it acceptable to you?
You bring up a perfectly reasonable technical point though - in ...
- 1,962
8
votes
Accepted
How can I intercept Android application's SSL traffic where SSL pinning is used?
SSL Pinning is the additional layer of security implemented at the client side to let the mobile application only trust a particular SSL certificate during HTTPs connection establishment and not the ...
- 975
8
votes
Accepted
Is there no way to bypass certificate pinning without patching apps?
No, there is no way to bypass certificate pinning without application patching or using debugger (tracer). The reason is that, in simple words, certificate pinning is when a CA certificate is ...
- 1,304
7
votes
Why is the issuer certificate different at my workplace and at home?
Being able to "read" all your encrypted communication doesn't necessarily mean someone is literally sitting at a computer and looking at your data. The "man in the middle" is generally a firewall or ...
- 266
7
votes
Accepted
Securing a Web application using HSTS
Being able to intercept SSL traffic with an imported root certificate is not considered a weakness of the web application. It's a browser design decision to allow the import of custom local trust ...
- 45.1k
7
votes
As a contractor how do I work on multiple client networks without data leakage?
Enable split tunneling, so the only traffic that goes across the VPN to Client X is traffic bound for their servers.
6
votes
Accepted
Preventing a Burp and Intercept
You may want to ask the reporter to explain what they think the security implications are.
Tricking the browser into showing a successful login via a locally forged API response does no harm unless ...
- 45.1k
6
votes
Accepted
Does SSL inspection break applications utilizing certificate pinning?
Does this mean that these applications cease to function completely on
corporate and academic networks that utilize SSL inspection, unless
the administrator specifically exempts them
Yes,You are ...
- 3,814
6
votes
Mutual TLS and Cert Pinning solving the same problem?
While mutual TLS and certificate pinning are intended for different problems they can be used to solve the specific problem of detecting active MITM too. Only, with mutual TLS it is the server which ...
- 208k
6
votes
As a contractor how do I work on multiple client networks without data leakage?
If you are on a Linux laptop, I recommend a separate Linux user for each client. Those separate users can each have their own scripts to connect to a network and VPN if necessary.
With this method and ...
- 3,736
6
votes
Accepted
Exactly why is it not possible to "drop-out" of TLS 1.3 proxy inspection?
In TLS 1.2, the master secret, which is used for deriving keys, is derived from the pre-master secret and some additional data. With RSA key exchange, the TLS middlebox can simply act as the client ...
- 9,712
5
votes
Understanding SSL man-in-the-middle and its limitations
I think you got some of the concepts right but there are also some misunderstandings or inaccuracies.
Decrypting the traffic in a passive man in the middle attack (i.e. only sniffing) by using the ...
- 208k
Only top scored, non community-wiki answers of a minimum length are eligible