Thanks for the info, Rafael.
Stan
On Mon, Aug 31, 2015 at 11:39 PM, Rafael Akchurin <
rafael.akchu...@diladele.com> wrote:
> The SSL pinning means dropbox application does know the fingerprint of the
> certificate of the connection out-of-band and will simply refuse to work
> with another (even
The SSL pinning means dropbox application does know the fingerprint of the
certificate of the connection out-of-band and will simply refuse to work with
another (even trusted one).
It is not possible to change this behaviour without recompiling unless
developers of dropbox has some "managed" mo
Yes, SSLBump still works with the web apps, but it would be a lot more
convenient if the mobile apps would also work.
Does anyone know how to pin Squid's self-signed certificate's public key to
Googledrive and Dropbox so that it would work with SSLBump enabled?
Stan
On Mon, Aug 31, 2015 at 3:29
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
BTW, GoogleDrive web application still works with bump. Use it, Luke ;)
01.09.15 2:21, Jason Haar пишет:
> On 01/09/15 02:59, Shane King wrote:
>> Accessing via the browser may work but the sync clients that sit in
>> the system tray use certifica
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
But everything will very secure, is it? :)
01.09.15 2:21, Jason Haar пишет:
> On 01/09/15 02:59, Shane King wrote:
>> Accessing via the browser may work but the sync clients that sit in
>> the system tray use certificate pinning I believe.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Aha. And future of caching software too. With total HTTPS migration.
01.09.15 2:21, Jason Haar пишет:
> On 01/09/15 02:59, Shane King wrote:
>> Accessing via the browser may work but the sync clients that sit in
>> the system tray use certificate
On 01/09/15 02:59, Shane King wrote:
> Accessing via the browser may work but the sync clients that sit in
> the system tray use certificate pinning I believe. So if certificate
> pinning is being used, ssl bumping will not work. You will see an
> alert message in the pcap followed by a connection
Accessing via the browser may work but the sync clients that sit in the system
tray use certificate pinning I believe. So if certificate pinning is being
used, ssl bumping will not work. You will see an alert message in the pcap
followed by a connection termination.
-Shane Original messa
