Paul Wouters <p...@cypherpunks.ca> writes: >> If you disallow the cert and turn off encryption, Borat can still read >> everyone's traffic, but so can everyone else on the planet. > >Who said "turn off encryption"?
If you don't allow the MITM cert, which is needed to enable encryption in the browser, you don't get any encryption. Disallowing the MITM cert has the effect of turning off encryption. Peter. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy