Ever heard of HTTPS?
Ever heard of SSL MITM Proxy? Required by law (and corporate compliance departments) in many industries.
Also, cloudflare. They are the MITM for what, like 80% of the internet now?
Ever heard of SSL MITM Proxy? Required by law (and corporate compliance departments) in many industries.
Also, cloudflare. They are the MITM for what, like 80% of the internet now?
Police states and "internet security" mal^H^H^Hsoftware may MITM stuff. If you're actually doing business with customers in those police states, you probably have someone local who can test. "Internet security" software is unlikely to break things just to insert ads (as the ISP mentioned in the post did over plain HTTP).
Could you please provide details about this?
And in that case, the proxy can both, manipulate the JS as well as the HTML, so the argument of the linked page is still faulty.
I have no idea why this works so well, but I haven't found another way (other than getting off of my VPN) to get past this screening page.
They provide the device(s), they have access to it. Countless ways to mess with the trust.
If anyone thinks they're safe from their employer due to SSL, lol.
> Does their ISP or mobile operator interfere with downloaded JavaScript?
In any case, if some rogue corporate proxy breaks your website, then either they pay you to fix it or you tell them to get lost.
Please give source for that claim where Cloudflare implements man-in-the-middle attack.