First good argument I see about why the GitHub acquisition is bad.https://twitter.com/ErrataRob/status/1003396869052141568 …
-
It’s certainly possible to intercept SSL traffic if you’re controlling the middle layer. Many companies do it, some countries as well. I don’t see how China cannot.
No, it isn't. That's the whole *point* of TLS. To intercept it you need to control *an endpoint*. Companies control the local endpoint. China tries, but cannot control all endpoints (people's devices).
-
-
MITM was made possible after adding SNI extension to TLS (OpenSSL) for cert handling to accommodate for companies like CloudFlare. This is just one of many HTTPS flaws.
-
You have no idea what you're talking about. MITM is never possible without a compromised endpoint.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.