It is just not wise to allow some random application to MiTM your SSL traffic.
No but it might be fun to play with in a Qubes environment or similar where you can inspect packets going in and out for anything weird happening.
System-wide open source ad blocker for Mac, Windows, and Linux
11–20 of 173 posts
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#12I haven’t had time to look at the code. Is this generating a unique root certificate per install? If not this could become an attack vector to decrypt TLS traffic.
> During the first run, Zen will prompt you to install a root certificate. This is required for Zen to be able to intercept and modify HTTPS requests. This certificate is generated locally and never leaves your device.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#13I haven’t had time to look at the code. Is this generating a unique root certificate per install? If not this could become an attack vector to decrypt TLS traffic.
[deleted]
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#14More than a browser extension as it filters all apps (esp. Electron apps).
Worse than a browser extension where I can deactivate per-site to solve false positives.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#15It is just not wise to allow some random application to MiTM your SSL traffic.
If you can read the code and asure that the traffic won’t be sent to a malicious third party, why not? What is the concern?
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#16I'm comfortable with a DNS based blocker (pi-hole) and it seems to work quite well. Bonus: It works across all devices on the network, rather than installing something onto the OS.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#17Application doesn't provide a way to remove installed certificate. Don't use this app.
The way Charles does this is by generating a root certificate dynamically and makes it really easy to remove by giving you instructions for how to install and remove it just for Chrome for example:
https://www.charlesproxy.com/documentation/proxying/ssl-prox...
https://www.charlesproxy.com/documentation/using-charles/ssl...
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#18It is just not wise to allow some random application to MiTM your SSL traffic.
If you can read the code and asure that the traffic won’t be sent to a malicious third party, why not? What is the concern?
How would you know if the binary was built from the code verbatim?
How would you know that for future updates?
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#19Why would anyone need to block ads outside of the browser? This seems like it's just asking to introduce obscure errors into other apps?
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#20Earlier quoted context omitted.
If you can read the code and asure that the traffic won’t be sent to a malicious third party, why not? What is the concern?
How would you know if the binary was built from the code verbatim? How would you know that for future updates?
You could just compile it. For updates you could like pull down the new code, check the diff, and rebuild.