article

toot

easily contact your MEP: https://fightchatcontrol.eu/

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (1 child)

What if they just do MITM with a Trusted root? Does HSTS provide a method to do cert pinning?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    HSTS just enforces HTTPS over HTTP.

    I seriously doubt Chrome or Firefox would ever be coerced into trusting a cert like that. If they did then you would see a very rapid shift away from those browsers to one or more of the open source alternatives.

    And any CA that issued such a cert that allowed for wholesale MITM access like that would be blacklisted by all the browsers very quickly as well. That would put the CA out of business very quickly.

  • source
  • parent