Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Sure, antivirus software does inspection at the endpoints. Guess what: they usually employ their MITM CA for that. :-)

It’s not like I haven’t written about that before. Here is a particularly disastrous implementation: https://palant.info/2019/08/19/kaspersky-in-the-middle--what...



Yep, I think there are ways to do it without a MITM CA but they are more fragile.

There's also this post https://www.securityweek.com/antivirus-software-has-negative...

Both are bad but network level is worse.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: