Hacker News new | ask | show | jobs
by therein 3852 days ago
Was the large Chinese site serving traffic over HTTPS?
1 comments
dujiulun2006 3852 days ago
Sadly, they (Baidu) are not, which is why the script content was easily modified.

To clear it up, I said that GFW "can" do (but has not yet done) these. But it tried to MITM some https traffic earlier with a non-trusted certificate as an experiment.

link
dujiulun2006 3852 days ago
@andreyf: More like a social experiment. See whether people would notice (we did) and what's their reaction.
link
andreyf 3852 days ago
Experiment? This isn't science. They can ask any engineer what MITM with a non-trusted cert would do, and that's nothing.
link