Well, SSL is supposed to be an encrypted channel between you and the SSL server, but...
a signed proxy is like your 'man-in-the-middle' attack.
And by using their own signed, root-validated certificate, you might not even get a pop up when you connect.
See the SANS.org whitepaper at http://www.sans.org/rr/whitepapers/threats/480.php
Evil marketers and advertisers... always trying to get more information about everybody,
just so they can try to sell more product. We don't tolerate this in the real world,
if some guy from Colgate broke into my house to see what toothpaste was in my bathroom,
I'd shoot him. In self defense of course. |
