And you still can MITM the traffic, you just have to install your MITM's cert on... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dschep on Jan 2, 2017 | parent | context | favorite | on: Why HTTPS for Everything?

And you still can MITM the traffic, you just have to install your MITM's cert on your device you want to MITM.

viraptor on Jan 2, 2017 [–]

This only kind of works. Apps can embed their whole certificate chain and ignore the system one. I don't disagree we should have HTTPS everywhere, but for reverse engineering it does make things harder.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact