corporate IT administrators
corporate IT administrators
Posted Mar 22, 2016 17:58 UTC (Tue) by nye (guest, #51576)In reply to: corporate IT administrators by paulj
Parent article: TLS certificate management on Android
>And how will the net security effect of that approach be any different to the current "install a root cert and let the proxy MITM everything" approach of today?
It would mean that all of the original TLS information is available to the browser, which can verify it and present it to the user in the usual way, rather than being stripped by the proxy and replaced with something else as is currently necessary because the only way to proxy https is nasty MITM shenanigans.