Re: SSL inspection

2018-02-18 Thread Reco
Hi. On Sun, Feb 18, 2018 at 07:30:06AM +, Jonathan de Boyne Pollard wrote: > Reco: > > > Browsers do certificate validation, "wrong IP address" would be possible > > if the third party somehow produced a valid certificate for > > wiki.debian.org (you have to be a CA *or* the

SSL inspection

2018-02-17 Thread Jonathan de Boyne Pollard
This has been a known practice for many years, and there have been for that time a wide range of products sold to employers for specifically doing this. * https://technet.microsoft.com/en-gb/library/ee658156.aspx * http://cookbook.fortinet.com/why-you-should-use-ssl-inspection