alt Hacker NewsBy the time you are connecting to spoofed WiFi networks you are already in trouble, using this vector seems like a really convoluted attack at that point.
By the time you are connecting to spoofed WiFi networks you are already in trouble, using this vector seems like a really convoluted attack at that point.
Perhaps? But sub "spoofed" for "Free Wifi" and it doesn't seem to convoluted?
The point is that we've been able to trust SSL to protect us on open networks. We might not trust the owner of the infrastructure, but SSL meant that we could tell when our request had been tampered with. That's no longer the case.