N
N
netW0rm2016-02-06 22:07:25
Digital certificates
netW0rm, 2016-02-06 22:07:25

Can a website find out about a spoofed SSL certificate?

I'm not very good at cryptography ... I tried to figure out the TLS protocol and all these certificates, but I didn't understand anything right off the bat.
The question is this:
Using some library, I am doing mitm-proxy on my localhost to analyze and replace https traffic. This library automatically generates a certificate, then I import this certificate into the browser so that it does not give a warning, and everything works. But I'm wondering if (purely in theory) the site I go to can find out that I'm using a fake certificate? And if so, is it possible to fix it? For example, the library allows you to specify any certificate for it, and I can export the real certificate from the browser and give it to the library. Or am I misunderstanding something about this protocol?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question