Techist - Tech Forum - View Single Post - Account login Security change

Click Here to Login
View Single Post
Old 01-04-2017, 08:10 AM   #3 (permalink)
Private Joker
carnageX's Avatar
Join Date: Feb 2007
Location: South Dakota
Posts: 24,542
Default Re: Account login Security change

Originally Posted by luke127 View Post
Err, this isn't technically true. If you can spoof the HTTPS certificate, then a MITM attack can still work. I know this is possible because Lightspeed Systems uses this technique to decrypt google searches made by students in a multitude of schools around the globe (In order to monitor google searches for key terms, eg things related to terrorism or suicide etc). (Since Google forces HTTPS connections during searches now).
Depends on how the cert is being verified.

Honestly tho, the entire site should be on HTTPS, not just the login page.
Laptop: MSI GT70 2OC-059us | i7-4700MQ | 16GB | GTX 770m | 500GB SSD / 750GB HDD | 17.3" | Win10 Pro
Desktop: 4690k | 12GB g.Skill RipJaws | GTX 970 | 520hx | Z87X-UD4H | Corsair Vengeance C70 | Corsair H110 | Acer 25" | Acer 22" | Win10
Mobile: Samsung Galaxy Note 5

If I help you, or you just like what I said, rep me by clicking the under my post
carnageX is offline   Reply With Quote

Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 09:30 AM.

Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2018, vBulletin Solutions, Inc.