Hacker News new | ask | show | jobs
by superuser2 3794 days ago
Yes it must, because self-signed carts offer no defense against MITM.
1 comments
jessaustin 3793 days ago
To be more precise, they offer no defense against MITM on first visit. Once I've pinned a particular self-signed cert for a particular site, I'll be quite suspicious if that cert ever changes.
link
superuser2 3793 days ago
Okay, but that only helps the tiny subset of HNers who are manually pinning certs for a random website.

Further, real world MITMs are ad injection at the device (Lenovo Superfish) or ISP level, so they are persistent.

link