Comment

Comment by colemickens

I mean, that's how I MITM SSL traffic on a daily basis to do development.

None of that speaks to HSTS/Pinning... which is the feature meant to protect against this sort of thing. I'm specifically asking about how a company can bypass HSTS/Pinning without modifying my local browser.

Everything I'm reading indicates that's not possible.

parent colemickens 10 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton