5 ms·
> Seems like this is proof that it's not. How so? In order for this MITM to work, you must hand over the encryption certificates, so to block MITM, don't expo
by ColoursofOSINT 3y ago
> Seems like this is proof that it's not.
How so?
In order for this MITM to work, you must hand over the encryption certificates, so to block MITM, don't expose your private certs.
> I've never understood how/why encryption is the answer to man-in-the middle.
No encryption = Bob ---> Attacker (reads files) --> Alice
Encryption = Bob ---> Attacker (cannot read files) ---> Alice
- jqpabc123 3y agoSo a full MITM like Privoxy with access to the browser TLS handshake can not obtain or access or alter or replace the certs needed to decrypt web browser traffic? In other words, it's not possible for MITM (like Privoxy) to operate in a transparent manner.