[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] MITM attack on TLS

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] MITM attack on TLS
From: Justin <davisjustin002@xxxxxxxxx>
Date: Fri, 20 Nov 2015 17:18:00 -0600
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 20 Nov 2015 18:18:12 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=HBVGDtuH6iHNQ4wG7KacXySSanqJs30aa3z8cWiAfbc=; b=smHQL/D4jmLguzNEkeHVgqTi5BU2C6/zqi7tFJuIa0XU0lMm66Uih8x01U7P9CKjyL cd336D8dACfwSps8OS7WfeC2PCX0PKsJJsALqvqet872Rs4jMouU/fX1QaT/MOpK6xc5 jpbXExHik3qlCVW6zjcxpPijeTOYeCGfC0hL37q92AfgxfI2dSa2qQh61RiTECRJwIcb w/fVnStNSjLFPx9+2tf4zsBYXSLfTzwDJF4aeLa6nqiGSARIhzoRNGIB4IVm8UBW9xpn rPkCXAOwuw8wAbYvoc8MXeU99MFCm/S+RROm2x6pktWSQax80pm2z4LKN5mOP2VkROOh WGUw==
In-reply-to: <CAB7TAMmfAUO1+_kFhMXvSKGZCaBp-ZuMQ8BzHYt_GqphojEofA@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <CAPjf7ZXsPCo2U0rXD2uXWsrxc5Do=9_1KUyY1JrU+gYztNdXbg@xxxxxxxxxxxxxx> <564F9FD7.3060803@xxxxxxxxxx> <AA7E7174-841B-4710-BFFA-0CE406F9F22F@xxxxxxxxx> <564FA467.3060905@xxxxxxxxxx> <CAB7TAMmfAUO1+_kFhMXvSKGZCaBp-ZuMQ8BzHYt_GqphojEofA@xxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

Allen,
SSH is probably more dangerous than OBFS4 because it coulee be detected with a DPI fingerprint.  They might question that.  I think Tor with transports is good.
> On Nov 20, 2015, at 5:16 PM, Allen <allenpmd@xxxxxxxxx> wrote:
> 
>> You should remove these CAs
> 
> Or they might fire you.  IMO, you want to stay under the radar of your IT
> department.  Much better if you can to let them have their MiTM certs and
> go around them using SSH or some other protocol.
> -- 
> tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] MITM attack on TLS
  - From: Andreas Krey

References:
- [tor-talk] MITM attack on TLS
  - From: Justin Davis
- Re: [tor-talk] MITM attack on TLS
  - From: Ivan Markin
- Re: [tor-talk] MITM attack on TLS
  - From: Justin
- Re: [tor-talk] MITM attack on TLS
  - From: Ivan Markin
- Re: [tor-talk] MITM attack on TLS
  - From: Allen

Prev by Author: Re: [tor-talk] MITM attack on TLS
Next by Author: [tor-talk] MITM attack on TLS
Previous by thread: Re: [tor-talk] MITM attack on TLS
Next by thread: Re: [tor-talk] MITM attack on TLS
Index(es):
- Author
- Thread