If you're using a browser without certificate pinning wouldn't a MITM attack suf... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

csdrane on Dec 4, 2016 | parent | context | favorite | on: Signs of a Creepy Government Conspiracy at Standin...

If you're using a browser without certificate pinning wouldn't a MITM attack suffice? E.g. sslstrip

airza on Dec 4, 2016 [–]

gmail uses HSTS so sslstrip is unlikely.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact