The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux
To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/
The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux
To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/
Better: never trust https. It’s highly likely that at any point in time, at least one of your adversaries has control of a CA in your root store.
Use Tor Onion Services. It solves this issue by using pinned certs.
What’s the tor address for google?
There is no technology that exists that would keep the data you send to an evil US company safely private
What I’m saying is your suggestion is moot for most people, seeing most commonly used services aren’t available on tor net.
There might be more than you think
https://github.com/alecmuffett/real-world-onion-sites
Yeah, we have to write the admins to let them know this.
We have the technology. We can make the internet a safer place.