31–40 of 245 posts
Is it possible to modify HTTPS traffic? Wouldn't they have to replace the CA certs on the target machine first before being able to modify that traffic?
Or the MITM box could use some kind of HTTP downgrade attack and not worry about certificates at all.
"Sollen" translates to "should" and not "will" That means there is a element of uncertainty there whether they actually will.
Actually it translated to "have to", not "should" (which would more properly be "sollten").
Wouldn't "have to" be "müssen"? In what cases would you use "sollen" to have a similar meaning?
And "sollten" is either Präteritum or Konjunctive II, which as I understand it would both mean "should have", though in different senses. Why is that a more proper translation of "should"?
Mods: This is an article about a proposed law, so "will" isn't really an accurate reflection (yet, or hopefully at all) and the title should be changed. My proposal: "New German law would force ISPs to redirect traffic to intelligence services for trojan install" (if that is not to long).
My somewhat lame excuse: The law will most probably pass, current govt is a coalition of the two largest parties with overwhelming majority and absolutely no clue about anything digital.
Edit: would "shall" work instead of "will"?
This idea is fantasy.
Pretty shocking in a state that has such strict privacy laws. Not sure how the two can come from the same mouth, and even be in public view. My understanding is that the privacy restrictions are largely the result of half the country having lived under the Statsi, and thus being extremely weary of government eyes. Here it’s out in the open!
This predates the wall, but the wall only confirmed what was going on beforehand.
"Sollen" translates to "should" and not "will" That means there is a element of uncertainty there whether they actually will.
"will" isn't the exact translation of the headline, the idea is written in an upcoming law that will be discussed (or rubber-stamped?) next Wednesday...
Mods: This is an article about a proposed law, so "will" isn't really an accurate reflection (yet, or hopefully at all) and the title should be changed. My proposal: "New German law would force ISPs to redirect traffic to intelligence services for trojan install" (if that is not to long).
Yes, you are right, but the current title is just 2 chars under the limit and I couldn't think of a shorter one. Sorry for the somewhat misleading "will". My somewhat lame excuse: The law will most probably pass, current govt is a coalition of the two largest parties with overwhelming majority and absolutely no clue about anything digital. Edit: would "shall" work instead of "will"?
Is it possible to modify HTTPS traffic? Wouldn't they have to replace the CA certs on the target machine first before being able to modify that traffic?
They just have to hijack one existing CA that's within their jurisdiction and force it to issue MITM certs. Key pinning or certificate transparency may mitigate this. Or the MITM box could use some kind of HTTP downgrade attack and not worry about certificates at all.