Am 01.12.13 17:49, schrieb Yoav Nir:
pretty much every firewall around can now do the MitM thing

For those cases where the system administrator in an enterprise network installs a fake cert in your trust anchor store. For BYOD and other cases this is not possible since it would be indistingushable from an attack*.

Ciao
Hannes

*: Some people may even argue that the practices of some enterprise networks are attacks but luckily there are also other companies around.

_______________________________________________
websec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/websec

Reply via email to