On Sunday 14 August 2005 19:00, Ian G wrote:
Ben Laurie wrote:
On wired networks they are easy for the network admins to mount. The
practice is sufficiently commonplace that many corps have their own CA
keys in employees' browsers so they can forge X509 certs.
Hmmm. Is that the sole reason? Or one of many reasons?
And how often do they conduct this attack?
There are web-proxies on the market which do this in order to be able to
track HTTPS connections of employees. This is illegal or at least of
doubtful legality in most European countries, so I can't provide you with
examples of companies who do this.
Konrad
pgpItopCJ8WIE.pgp
Description: PGP signature