points by yanslookup 2 days ago | 0 comments
By the time you are connecting to spoofed WiFi networks you are already in trouble, using this vector seems like a really convoluted attack at that point.
[–] Nickste 2 days ago
[–] bigfish2026 2 days ago
Places like airports would be an absolute disaster. I’ve done so much dev work sitting in one and it would be easy enough to put a fake WiFi access point in a lounge.
The point is that we've been able to trust SSL to protect us on open networks. We might not trust the owner of the infrastructure, but SSL meant that we could tell when our request had been tampered with. That's no longer the case.