> This reduces the MITM to the initial handshake. Mostly. No matter much you trim your certificate chain, there's nothing preventing Google/your bank/Amazon/etc from sharing their private key with, say, Uncle Sam.…
Makes you wonder what actually happened with TrustWave (there's obviously more to it than "Oh, this was an ethical dilemma so we stopped."). Probably their customer found a way into the intermediate CA private key and…
Chrome already has a mechanism to detect a MITM for Google's servers by embedding those servers' public keys into Chrome itself. Of course, that doesn't stop a company from placing locally-trusted rogue certificates on…
They can do public-key pinning like Chrome does (for example, they embed the "mail.google.com" public key into Chrome itself, and verify that it's the certificate you're TLS'ing to.
I can not understand why, in Microsoft's blog post, they posted a Quality 20% JPEG of their new logo (http://windowsteamblog.com/cfs-filesystemfile.ashx/__key/Com...). It's compressed so much that there's a slight green…
> This reduces the MITM to the initial handshake. Mostly. No matter much you trim your certificate chain, there's nothing preventing Google/your bank/Amazon/etc from sharing their private key with, say, Uncle Sam.…
Makes you wonder what actually happened with TrustWave (there's obviously more to it than "Oh, this was an ethical dilemma so we stopped."). Probably their customer found a way into the intermediate CA private key and…
Chrome already has a mechanism to detect a MITM for Google's servers by embedding those servers' public keys into Chrome itself. Of course, that doesn't stop a company from placing locally-trusted rogue certificates on…
They can do public-key pinning like Chrome does (for example, they embed the "mail.google.com" public key into Chrome itself, and verify that it's the certificate you're TLS'ing to.
I can not understand why, in Microsoft's blog post, they posted a Quality 20% JPEG of their new logo (http://windowsteamblog.com/cfs-filesystemfile.ashx/__key/Com...). It's compressed so much that there's a slight green…