Hacker News new | ask | show | jobs
by rdl 4070 days ago
Local CAs are allowed to override even cert-pinning for this reason.
1 comments
phkamp 4070 days ago
Right, so when you're guest at a company you have to install their CERT on your device to use their guest-wlan ?

If you're an employee you have to put the company CERT on your smartphone ?

How does that improve your security ?

link
snowwrestler 4070 days ago
Guests shouldn't be on the corporate network anyway. Either companies will provide a guest WiFi signal that is physically separate from the corporate network (that's what my employer does), or they will ask guests to provide their own connectivity via LTE.
link