Conversation

Notices

1. kat (boneidol@indy.im)'s status on Monday, 05-Jan-2015 22:52:45 UTC kat

   • zenheathen
   @zenheathen it's such common practice in enterprises. Every webfiltering/utm vendor pushes a SSL interception solution. The browser vendors are complicit too. If you install a third party rootca they allow it to override certificate pinning.
   • lnxw48 (Linux Walt) (lnxw48@fresh.federati.net)'s status on Monday, 05-Jan-2015 23:05:13 UTC lnxw48 (Linux Walt)

     in reply to
     Not just employers, either. I’ve seen browser-valid MITM appliances being marketed to operators of public #WiFi hotspots, such as #coffee shops and hotels.
     laurelrusswurm repeated this.
   • kat (boneidol@indy.im)'s status on Tuesday, 06-Jan-2015 00:16:22 UTC kat

     • lnxw48 (Linux Walt)
     I think some of Squid 3 development was funded specifically for ssl interception. Not a bad thing, but shows the demand.