Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

MITMing someone with selfsigned certs on an open wifi network is trivial. Any scriptkiddy can do it with mere minutes of setup and technical rampup: (http://www.thoughtcrime.org/software/sslsniff/).

In the real world, self-signed certs provide neither identity verification nor security.





Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: