[tor-talk] MITM attack on TLS

Justin davisjustin002 at gmail.com
Fri Nov 20 23:18:00 UTC 2015


Allen,
SSH is probably more dangerous than OBFS4 because it coulee be detected with a DPI fingerprint.  They might question that.  I think Tor with transports is good.
> On Nov 20, 2015, at 5:16 PM, Allen <allenpmd at gmail.com> wrote:
> 
>> You should remove these CAs
> 
> Or they might fire you.  IMO, you want to stay under the radar of your IT
> department.  Much better if you can to let them have their MiTM certs and
> go around them using SSH or some other protocol.
> -- 
> tor-talk mailing list - tor-talk at lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk



More information about the tor-talk mailing list