undefined | Better HN

0 pointsdxdm2mo ago0 comments

> The attacker HTTPS contemplates controls whether victims see SYN+ACK packets in response to their 80/tcp SYNs.

This informationally dense and adventurously worded sentence is the kind that you can only understand if you already understand it, it feels like. I certainly can't unpack it without getting my hiking gear on. Not this rainy morning, though, may the transport layer gods forgive me.

0 comments

vluft2mo ago

if an attacker is in the position to try to MITM TLS, they're in the position to just serve whatever they want on port 80 even if your server isn't doing that.

tptacek2mo ago

They can't all be winners!

dxdmOP2mo ago

Thanks for sending them on their way regardless. It does tend to move things forward.

tptacek2mo ago

Like a good dose of dietary fiber.

j / k navigate · click thread line to collapse

0 pointsdxdm2mo ago0 comments

> The attacker HTTPS contemplates controls whether victims see SYN+ACK packets in response to their 80/tcp SYNs.

0 comments

vluft2mo ago

if an attacker is in the position to try to MITM TLS, they're in the position to just serve whatever they want on port 80 even if your server isn't doing that.

tptacek2mo ago

They can't all be winners!

dxdmOP2mo ago

Thanks for sending them on their way regardless. It does tend to move things forward.

tptacek2mo ago

Like a good dose of dietary fiber.

j / k navigate · click thread line to collapse