On Sunday 14 August 2005 19:00, Ian G wrote: > Ben Laurie wrote: > > On wired networks they are easy for the network admins to mount. The > > practice is sufficiently commonplace that many corps have their own CA > > keys in employees' browsers so they can forge X509 certs. > > Hmmm. Is that the sole reason? Or one of many reasons? > > And how often do they conduct this attack? There are web-proxies on the market which do this in order to be able to track HTTPS connections of employees. This is illegal or at least of doubtful legality in most European countries, so I can't provide you with examples of companies who do this. Konrad
Attachment:
pgp00134.pgp
Description: PGP signature