Matthew GreenThis thing Facebook did โ running an MITM on Snapchat and other competitorsโ TLS connections via their Onavo VPN โ is so deeply messed up and evil that it completely changes my perspective on what that company is willing to do to its users.
๐๐ท๐ญ๐๐ฃ๐ฒ๐ฎ๐ญ๐๐ฎ ๐ค@matthew_d_green How does that even work? They should get a certificate error when someone is trying to do a MITM.
ArtemesiaNot if they MITMed the certificate download in the first place.
@artemesia @matthew_d_green If them MITM the SSL/TLS connection, they are doing that anyway, but how would they get a valid certificate for a competitor?
Of course their own app could ignore the invalid certificates, but we don't have to use it.