New HTTPS Interception Tools Available from Cloudflare

itman · Mar 18, 2019

What is shocking is the 15%+ positive detection of MITM interception plus a sizable percentage in the unknown category.

Cloudfare announced the release of two new tools designed to make it simpler to check if TLS connections to a website have been intercepted, to detect vulnerable clients and potentially notify them when their security is compromised or degraded.

The reasons behind HTTPS interception can be both benign and malicious, and it happens when Internet connections go through a proxy or a middlebox instead of connecting the client directly to the server, leading to situations dubbed "monster-in-the-middle" by Cloudfare.

A research paper on the security impact of HTTPS interception from 2017 found that HTTPS connection interception is startlingly widespread, with "62% of traffic that traverses a network middlebox has reduced security and 58% of middlebox connections have severe vulnerabilities."
Click to expand...

https://www.bleepingcomputer.com/ne...interception-tools-available-from-cloudflare/

We also have a new term, monster-in-the-middle.

ronjor · Mar 18, 2019

Posted here. > https://www.wilderssecurity.com/thr...for-pcs-and-phones.402265/page-4#post-2815302

Log in or Sign up

New HTTPS Interception Tools Available from Cloudflare

itman Registered Member

ronjor Global Moderator

Log in or Sign up

New HTTPS Interception Tools Available from Cloudflare

itman Registered Member

ronjor Global Moderator

Useful Searches