Heykuki News

TopNewBestAskShowJobs
TopNewBestAskShowJobs
Ask HN: Disable private trust MITM in chrome (or what browser should I use)?
5 points
natvert
10 years ago
Per the comment here: http://www.chromium.org/Home/chromium-security/security-faq#TOC-How-does-key-pinning-interact-with-local-proxies-and-filters-

Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites. “Data loss prevention” appliances, firewalls, content filters, and malware can use this feature to defeat the protections of key pinning.

and here: https://news.ycombinator.com/item?id=9078506