Some HTTPS Inspection Tools Actually Weaken Security (itworld.com)

America's Department of Homeland Security issued a new warning this week. An anonymous reader quotes IT World: Companies that use security products to inspect HTTPS traffic might inadvertently make their users' encrypted connections less secure and expose them to man-in-the-middle attacks, the U.S. Computer Emergency Readiness Team warns. US-CERT, a division of the Department of Homeland Security, published an advisory after a recent survey showed that HTTPS inspection products don't mirror the security attributes of the original connections between clients and servers. "All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected," US-CERT said in its alert.
Slashdot reader msm1267 quotes Threatpost: HTTPS inspection boxes sit between clients and servers, decrypting and inspecting encrypted traffic before re-encrypting it and forwarding it to the destination server... The client cannot verify how the inspection tool is validating certificates, or whether there is an attacker positioned between the proxy and the target server.

Comments

expose them to man-in-the-middle attacks

[fisted]

might inadvertently make their users' encrypted connections less secure and expose them to man-in-the-middle attacks,

Well no shit, given that the traffic inspection itself has to be done via a man-in-the-middle attack.

Re:expose them to man-in-the-middle attacks

[JohnFen]

Yes, this.

My reaction to this story was "well, duh." Anyone who didn't already know this is someone who isn't familiar enough with the concepts involved.

Re:expose them to man-in-the-middle attacks

[bill_mcgonigle]

My reaction to this story was "well, duh." Anyone who didn't already know this is someone who isn't familiar enough with the concepts involved.

Huh? There's no "concept involved" that leads to the inevitable conclusion that some HTTPS proxies won't do certificate authentication. It's an implementation error.

Of course increasing complexity will increase the programming error rate, but that's not at all specific to this vulnerability. And since the vendors have patched these flaws, they're not inherent to the concept of HTTPS interception.

Re:expose them to man-in-the-middle attacks

[JohnFen]

The concept involved is the increase in the "surface area" of potential failure. If you've introduced a system that sits in the middle, decrypting communications, processing the communications, and re-encrypting them, you've also introduced quite a lot of things that can go wrong, and have increased the chances that something will.

In the global view, given how common these things are, is approaches inevitable that there will be security problems.

Re:expose them to man-in-the-middle attacks

[93 Escort Wagon]

Oh come on, don't be ridiculous. Next thing you'll try to tell us is that TSA luggage inspection makes the stuff in our suitcases less secure...

Re: expose them to man-in-the-middle attacks

[Anonymous Coward]

Indeed. No need to target individual computers to access their encrypted data. All you need to do is target the MITM TLS inspection tool.

Re:expose them to man-in-the-middle attacks

[Anonymous Coward]

so... they should issue advisories only to people who already understand and know about all that is entailed? would you read them?

do you really feel so cool that you are way ahead of John Q Public and are you really so disgusted that some education is taking place?

Re: expose them to man-in-the-middle attacks

[JWW]

Yep, that's always the logic IT security uses when we try to get software approved and they deny it.

Any IT group who implements this is NOT serious about decreasing the attack space, they just want ton spy on employees.

Re: expose them to man-in-the-middle attacks

[Matt.Battey]

Sometimes I wish there was a like button on slashdot...

Re:expose them to man-in-the-middle attacks

[imidan]

I'd say there is a concept involved, and not just surface area. There's also the fact that authenticating certs is an additional step, that the system will appear to work without doing it, and that there exist programmers who are some combination of lazy and incompetent. It's the same concept involved when people write their own auth systems, or credential databases--they fuck it up because they don't understand the danger of storing plaintext passwords, or they invent their own "encryption," or any number of other bad ideas.

Re:expose them to man-in-the-middle attacks

[guruevi]

It's not an implementation error, it's an unavoidable feature of these SSL inspection proxies. You basically have to trust everything coming through the proxy, remove the capability of handling or inspecting the security yourself and give up the notion that it's safe, secure and unchanged - that is the feature the people in charge of security over these organizations *want*.

On the other hand, if an SSL vulnerability crops up, upgrading your browser (or the requirement to) doesn't matter anymore and you have to downgrade your security to the lowest common denominator in security (which is most likely Windows XP, Internet Explorer 6 or Java 6) for your entire organization because if you don't, those things won't work anymore.

Re: expose them to man-in-the-middle attacks

[Anonymous Coward]

Or are a school that wants students to have access to educational YouTube without all of YouTube. Honestly that is likely the bulk of the reason for this. The average employer either blocks a whole site or allows it, no need for inspection for that. Google could just move educational stuff to a sub domain but no that would be too hard.

Re:expose them to man-in-the-middle attacks

[Anonymous Coward]

Yes, because John Q. Public is surfing /. to get their tech news..... :/

I seriously doubt more than 1% of John Q. Public even pays attention to tech security warnings from DHS and US-CERT, so this is a warning to people who are already somewhat tech oriented. When you consider the audience, the GPs comment makes perfect sense.

Re:expose them to man-in-the-middle attacks

[rwyoder]

might inadvertently make their users' encrypted connections less secure and expose them to man-in-the-middle attacks,

Well no shit, given that the traffic inspection itself has to be done via a man-in-the-middle attack.

Exactly.
At a previous employer (large Fortune 500 company), I got roped into going to a class put on by the vendor of a proxy product.
The instructor was a very sharp fellow who flat out stated that the "HTTPS inspection" feature was a MITM attack.
Interesting thing was this company was not using the feature due to the _legal_department_ prohibiting it's use.

Re: expose them to man-in-the-middle attacks

[Mindscrew]

Just to make sure i'm clear here...

Are saying; that only IT groups that are serious about security, allow unknown encrypted data to pass out the perimeter with no regard to what could be present in it? Are you saying that IT groups should just accept the risk of data being ex filtrated over these unknown encrypted connections? What about C2 traffic?

As someone who regularly performs Security Assessments and Penetration Tests for the Financial Industry in the US... I would say that's rather naive...

There is absolutely ZERO expectation of privacy when using an asset that is provided by your employer.

Any IT group who is serious about decreasing their attack surface, knows that solution's like this are imperative to the overall security posture of the organization. Any IT department who is serious about protecting the organization knows; you just cannot allow unknown encrypted data to leave the network at the will of an employee.

The IT department doesn't give one fuck about your privacy.... as they shouldn't.
Its IT's job to protect the business from technology, and ensure that it has the tools and solutions in place to achieve the organizations business requirements. Yes, this includes middling SSL and TLS connections to ensure that company data is not leaking out of the perimeter.

If you don't want the IT department decrypting their data as it leaves their network; use your smartphone instead.

Re:expose them to man-in-the-middle attacks

[Anonymous Coward]

might inadvertently make their users' encrypted connections less secure and expose them to man-in-the-middle attacks,

Well no shit, given that the traffic inspection itself has to be done via a man-in-the-middle attack.

Well no shit, given that the traffic inspection itself has to be done via a CenturyLink-in-the-middle attack.

There, FTFY.

Re:expose them to man-in-the-middle attacks

[arglebargle_xiv]

The fact that you can transparently MITM a TLS connection, as the interception proxies do, shows how broken the entire HTTPS ecosystem is. If any random proxy can MITM you without the TLS layer raising alarms, then so can the NSA, CIA, FSB, MSS, and anyone else who cares to exploit HTTPS' broken ecosystem. The only difference will be that the various TLAs will hopefully do it in a less broken manner than the commercial vendors do, so you can't tell you're being intercepted while your browser happily displays its padlock icon to tell you everything seems legit.

Re:expose them to man-in-the-middle attacks

[fisted]

The fact that you can transparently MITM a TLS connection,

Fact? Transparently? You can? How?

Re:expose them to man-in-the-middle attacks

[Bengie]

It's not an implementation error. "Secure HTTPS MITM" is undefined. Some many even argue, an oxymoron.

Re: expose them to man-in-the-middle attacks

[Bengie]

There is absolutely ZERO expectation of privacy when using an asset that is provided by your employer.

Is that so? The only way I can access some of my medical information is via my work computer. Are you saying I have zero expectations of privacy to access my private medical data? I'm sure my company is not the only one that has many benefits that are only accessible via intranet services. IT has no right viewing any of that data.

Re:expose them to man-in-the-middle attacks

[Anonymous Coward]

But now we have something we can point to for our idiot boss to show him that this is a bad idea.

Re:expose them to man-in-the-middle attacks

[upuv]

Actually that's not true and the man in the middle design is horrible for many reasons.

The better inspection tools will use a lollipop design where the terminating https device spans than traffic to another device for traffic analysis. Traffic that requires modification can then be routed through the lollipop device on a case by case basis.

Re: expose them to man-in-the-middle attacks

[GameboyRMH]

And I assume you have something in place to prevent the data on the machine from being encrypted (perhaps steganographically) locally before being sent out? Because otherwise your MITM system will only serve to prevent private information from being accidentally pasted in web forms. It would do nothing against exfiltration by malware or competent intentional leaking.

Re:expose them to man-in-the-middle attacks

[Anonymous Coward]

If any random proxy can MITM you without the TLS layer raising alarms

I think these tools require an additional certificate installed on the client systems to work.

then so can the NSA, CIA, FSB, MSS

They just "nicely" ask one of the many certificate authorities for access to the root key and they MITM anyone they want. Just like always.

Re:expose them to man-in-the-middle attacks

[JohnFen]

Not at all. My reaction had more to do with context than content. This is /. where the vast majority of readers are likely to already be reasonably familiar with these issues. I would not have the same response if the same article appeared in a less specialized forum. I was also not really criticizing its appearance here.

Re: expose them to man-in-the-middle attacks

[JohnFen]

Is that so? The only way I can access some of my medical information is via my work computer. Are you saying I have zero expectations of privacy to access my private medical data? I'm sure my company is not the only one that has many benefits that are only accessible via intranet services. IT has no right viewing any of that data.

In the US, anyway, Mindscrew is 100% correct. If you are using your employer's equipment, then the employer has every legal right to inspect the traffic you're generating and your use of the company's computer. You have zero expectation of privacy -- as I'm very sure the company makes clear in your onboarding documentation -- and if you expose sensitive personal information on their system, they are not legally in the wrong to look at it. (Things get into a legal gray area once we start talking about what they can actually do with that information).

My recommendation to you would be to fix the problem of having to use company equipment to look at your medical records. If you don't have your own computer and internet service, get one. If it doesn't work correctly, fix it. Or, at the very least, if you really must use your employer's computer for this sort of thing, use a VPN.

Re: expose them to man-in-the-middle attacks

[JohnFen]

Ack. Quoting problems! The first paragraph is an (unnecessary) quote of Bengie's comment.

Re: expose them to man-in-the-middle attacks

[Anonymous Coward]

I'm from HR. Yes that is so, full stop.

Re: expose them to man-in-the-middle attacks

[Anonymous Coward]

The only commenter with a brain.

Re: expose them to man-in-the-middle attacks

[Bengie]

All intranet services are only accessible via work computers.

Re: expose them to man-in-the-middle attacks

[JohnFen]

Are you sure? That would be highly unusual. In every case I've seen, health care portals are not run by the company itself, but by a different company acting as a contractor. In each of those cases, my employer has offered intranet access as you describe -- but you can also reach the portal by going directly to the contractor's website outside of the intranet.

If this isn't what your company is doing, then something is very, very wrong with your company's procedures.

Re:expose them to man-in-the-middle attacks

[Matt.Battey]

93, I just read this again, and man... I still like it. :)

If it's unzipping encryption it has to re-zip it

[Anonymous Coward]

It's as obvious as a zipper. If you unencrypt to inspect, you have to re-encrypt before sending it back along its path. Done perfectly, it's zero impact.

You have to verify that you're re-zip is as good as the original zip, or duh, you've weakened your zipper.

So it kind of begs the question how thorough and deployment-specif is the testing itself in the first place?

Why not test on multiple hops along the path if you can, including on a pseudo-client?

What's with the banner across the page?

[I'm New Around Here]

So now Slashdot has to have ads everywhere, even across the page as I scroll down.

Actually, it's just a grey bar, because the adblocker stops the actual content. But I still have a grey bar that I don't want.

So long slashdot. It's been nice knowing you over the last 16 years.

Re: What's with the banner across the page?

[fluffernutter]

It wouldn't be so bad if the ads weren't shifting the page by 200 pixels all through reading

Re: What's with the banner across the page?

[93 Escort Wagon]

It wouldn't be so bad if the ads weren't shifting the page by 200 pixels all through reading

Oh, that only impacts mobile devices - so it's obviously a tiny minority of the readership that's affected.

Just like the lack of unicode support doesn't impact a significant number of users either. Picky readers...

Re: What's with the banner across the page?

[fluffernutter]

No, my page shifts around in firefox. On my phone I get a full page ad inviting me to enter a contest that I can't make go away. I have to close my browser and come back to read slashdot. At first I thought I had malware of some sort but it only happened on slashdot.

Re:What's with the banner across the page?

[fiver-hoo]

Slashdot was never good.

Re:What's with the banner across the page?

[antdude]

I don't see those in my uBlock Origin.

Re: What's with the banner across the page?

[Anonymous Coward]

ya whats up with this? have their servers been infected?

Re: What's with the banner across the page?

[Anonymous Coward]

No, my page shifts around in firefox. On my phone I get a full page ad inviting me to enter a contest that I can't make go away. I have to close my browser and come back to read slashdot. At first I thought I had malware of some sort but it only happened on slashdot.

The nice thing about running an adblocker (Ublock Origin) is that I had no idea this was happening until you guys started mentioning it. Seriously, there's an easy solution for this.

Re: What's with the banner across the page?

[I'm New Around Here]

No, my page shifts around in firefox. On my phone I get a full page ad inviting me to enter a contest that I can't make go away. I have to close my browser and come back to read slashdot. At first I thought I had malware of some sort but it only happened on slashdot.

The nice thing about running an adblocker (Ublock Origin) is that I had no idea this was happening until you guys started mentioning it. Seriously, there's an easy solution for this.

I have Adblock running in Chrome, and even tried Adblock Plus as well. Both could "see" the grey bar, and could make it go away, but could not make it stay away. It's similar with sidebar ads on the yahoo page.

I could use the script blockers, and have before. But they make reading or adding comments very difficult/annoying, so I gave up on them.

I will try Ublock Origin and see if the grey bar goes away. Thanks for the info.

Re:What's with the banner across the page?

[I'm New Around Here]

Another poster above mentioned that one. I will try it and see what I get. Thanks.

Re:What's with the banner across the page?

[maestroX]

Checkout; http://winhelp2002.mvps.org/ho...

Re:What's with the banner across the page?

[I'm New Around Here]

I am now using uBlock Origin, and the gray bar is gone. I had to specifically target it and remove it, but it stays gone. Thanks for the help.

Re: What's with the banner across the page?

[I'm New Around Here]

Ublock has made the gray bar go away and stay away.

Re:What's with the banner across the page?

[antdude]

You're welcome. I remember having to block those big ad spots months ago too.

Re:What's with the banner across the page?

[blivit42]

What grey bar? Just install the YesScript plugin and disable JavaScript for slashdot (and do so as well whenever you get to one of the subdomains for a story). About the only thing that doesn't work when you disable JavaScript on /. is the ability to enter your own tags for a story. Block javascript for /. and all the places where ads would have gone don't even show up. It also stops the damn auto-refresh where you lose your place on the page. You get nice clean formatting. I agree that browing /. with JavaScript enabled is a poor experience, though....

Re:If it's unzipping encryption it has to re-zip i

[karnal]

I think they're also talking about the validation of the source - i.e. the man in the middle attack isn't just accepting the connection it's making on the client's behalf that it's own connection to the server is actually secure in and of itself.

It's a two pronged issue.

But ask yourself, what would a republican do?

[Anonymous Coward]

And then just do the opposite. 100% effective! Safe AND secure.

inspection products don't mirror the security?

[Anonymous Coward]

I suspect they mean duplicate or match.

Re:If it's unzipping encryption it has to re-zip i

[Z00L00K]

Since the certificate of the original site is very hard to re-create then the recipient would be able to detect a man in the middle attack, but on company computers it may be a lot harder since the company also controls the clients.

So don't do your private banking in a company environment.

Re:If it's unzipping encryption it has to re-zip i

[Qzukk]

Except in this case, the zipper was broken when you got it, you unzip it ignoring the broken teeth, zip it back up ignoring the broken teeth, and everyone assumes you're protecting them against this so they don't notice that it's gotten a bit drafty.

Re:If it's unzipping encryption it has to re-zip i

[JohnFen]

Done perfectly, it's zero impact.

Which means there's always some amount of impact, since you can't guarantee that it's done perfectly. HTTPS inspection tools are engaging in a man-in-the-middle attack themselves, and are introducing a whole new attack surface. We don't just have to trust that the code itself is implemented perfectly, we also have to trust that the server running it is not compromised, or that a legitimate admin isn't engaging in some nefarious activity.

This negates a rather large portion of the strength (such as it is) of HTTPS in the first place: that there were only two parties handling unencrypted data, the sender and the receiver.

Re:If it's unzipping encryption it has to re-zip i

[JohnFen]

So don't do your private banking in a company environment.

Don't do private anything on company equipment.

What I do, though, is use my own equipment (phone or tablet) to do my private stuff, and I use an SSH tunnel to my home server for internet access, so that the company network never sees any traffic that it can decrypt. Not a solution for everybody, but it works well for me.

Re:Wahhhhhh??

[JohnFen]

It's not actually breaking SSL, but it certainly does weaken HTTPS security.

HTTPS "inspection" tools?

[Anonymous Coward]

At first, I thought the story was talking about something new - e.g. companies (that operate web servers) performing MITM on their own servers. Which might make sense in some cases - you might want to enforce strong encryption by applying it uniformly at the "edge", while having less-secure-but-still-encrypted connections within your own network. And if this were designed poorly then yes, you could imagine screwing yourself up (for example if the edge server performs inappropriate data compression.)

But no, this is just the same thing that anyone with any sense has been saying for the last 20 years: MITMing your users' outgoing connections harms their security. Yawn.

Re:If it's unzipping encryption it has to re-zip i

[Anonymous Coward]

What do you do with DNS resolving? The easy solutions still leak DNS requests to admins of the network you are in.

They even let those Megapath scumbags advertise.

[Anonymous Coward]

Worse, one of the ads is for Megapath, who I adamantly refuse to ever do business with again under any circumstances.

When Megapath acquired Speakeasy, I ended up as a customer of theirs. Their customer retention practices are simply evil. Should you ever try to cancel, I advise you to document every single step. They made it so you could only cancel service by filling out a web form, after which someone would supposedly call you. I never got that call and thought I was cancelled, not being familiar with their process. Oh, the web form I used will not provide any manner of confirmation to you, either. Document what you did. Maybe even log a support call asking why it didn't work (and get a case #, agent name and preferably an email from the agent documenting your call, though I bet they won't give out that last one).

Only due to a fluke whereby my credit card changed and they were unable to charge the old card did I eventually find out that I wasn't really cancelled. I refused to pay the alleged balance until they cancelled service and provided me with proof that my account was terminated.

I sincerely believe that their scummy customer retention practices are deliberately scummy and I refuse to ever give them another dime in the future. Looking back, I can see how they set up every step to trap the unwary customer in their rules and designed their cancellation process to be as rotten as possible. Should you ever have the misfortune of doing business with them, read all the rules carefully and expect them to play tricks on you. Document everything and confront them with that proof when they try to say that you can't prove that you really cancelled, even though you've been using another internet service for months.

"Inadvertently"?

[jddj]

How is this inadvertent?

These tools have been out there for years.

The user of the inspection box is INTENTIONALLY looking at my encrypted data, which could include PHI, PCI, or just plain shit I don't want them to see. My security has already been breached.

That these boxes are even possible to create and deploy (i.e. that someone CAN grant a CA for the box (not even that someone will do so)) shows the untenability of the entire "web of trust" for certs that is supposed to make you certain your data isn't being hijacked over TLS.

As long as this is out there, one can have _zero_ confidence any TLS-encrypted session isn't being hijacked.

I hope there's a rebuild of encrypted transport, and that next time, they don't make certificates so horsey. No, I don't know how to do that perfectly. Seems there's no way to do it peer-to-peer if I have to go down to every bank or business with a printout of their cert and match it up.

Maybe there's something blockchain technology could offer to make certs truly verifiable...

Re:"Inadvertently"?

[guruevi]

An immutable database doesn't help here. This is about the intentional breaking of security for whatever reason. It's similar to you installing malware on your computer, you can't prevent stupid people from doing stupid stuff.

CA's are supposed to be responsible for the trust of a certificate. Even if a bank were to print out their certificate hash, you can technically generate another certificate with the same hash and you would also have to trust the $10/h teller and the branch's printer - I'd much rather trust they have a good sysadmin that made a good choice in CA than a network of unrelated people that have no clue.

Re: "Inadvertently"?

[jddj]

Yes, but the exposure here is in no way related to the banks choice of a cert provider. The bank doesn't enter into it, except as a place to rob.

Because top-level CAs CAN issue more CAs, some WILL: to governments, and accidentally or on purpose to freelance thugs. The thug sets up an interception box with said CA, and starts DNS poisoning attacks: he's got you.

Would prefer a system where issuance of a CA is a matter of real-time verifiable record, as would be each CA and cert on my machine. The browser could check an immutable public list in real time: blockchain might help here. Who says this CA is real, instead of on a machine in the basement? Everyone. Or no one. The system should be built so it CAN'T work without this record.

DC

Re: "Inadvertently"?

[Anonymous Coward]

lets get on this

Re: "Inadvertently"?

[guruevi]

a) You can get multiple certificates from multiple CA's for the same domain for good reason (say you want to switch providers or have multiple servers you need to secure). An SSL certificate only establishes a weak verification of ownership and no relationship whatsoever to your IP or a particular system.
b) You would have to trust and be able to scan hundreds of CA's containing millions of SSL certificates. Most blockchains take anywhere from 2-10 minutes to do a verification, can take up to days or weeks to update and we're talking about a blockchain that would have to be thousands of times larger than Bitcoin.
c) There is actually a mechanism in place to verify the SSL cert with a CA right now, as with the above, the amount of roundtrips, delays and variations of implementations make it a hard thing to do. Some servers have integrated OCSP stapling but it's nowhere near universal.

Re: "Inadvertently"?

[jddj]

Yes, but what makes this box work is a phony _CA_. If I can verify the CA with a world-verifiable blockchain, then can't I trust the cert? Or at least make a smart decision about doing so?

Seems the size of the CA problem is orders of magnitude smaller.

What I want is to sniff the phony CA(s) and distrust all certs from it.

Re: If it's unzipping encryption it has to re-zip

[JWW]

Yep, the IT group continually sends employees emails telling us how much they don't trust us, THEN the decrypt our SSL sessions and expect our Complete trust in them... no dice, you made it completely clear that No One could be trusted. How does your newfound snooping power change that concept?

Fucking DUH.

[Anonymous Coward]

If the HTTPS is being inspected, the user has already suffered a MITM attack.

Certificate pinning resolves this issue and also makes ALL of those Next Generation Firewalls as useful as any old fashioned packet filter, Source IP Destination IP.

Re:Fucking DUH.

[tepples]

Certificate pinning resolves this issue

How should a website get its certificate pinned correctly if a user's first visit is through the corporate MITM?

In fact, Chrome disables pinning when a certificate chains up to a user-installed CA, such as a corporate MITM (source).

Re:Fucking DUH.

[Anonymous Coward]

There's no defense if the browser disables pinning.

Re:If it's unzipping encryption it has to re-zip i

[Anonymous Coward]

That's correct my analogy was a best-case.

US-CERT is worthless

[WaffleMonster]

No shit Sherlock this announcement is 10 years too late. Years ago the cert list was much better and regularly provided somewhat useful information. Now traffic is nearly nil and warnings they send are comically outdated.

What happened to the alternatives to SSL/TLS?

[jonwil]

Various proposals have been put forward to replace various parts of SSL/TLS (including the broken CA model) with better things that can't be easily targeted with man-in-the-middle attacks.
The EFF has the Sovereign Keys project.
DANE stores security related information in DNS and is the subject of several RFC standards.
Other proposals exist to replace some or all of SSL/TLS as well.

Why are people out there in the real world (makers of web browsers and servers for example) not interested in implementing any of these alternatives to the current horridly broken system?

Re:What happened to the alternatives to SSL/TLS?

[guruevi]

Because they all have the same problems and don't fix any of the article's problems. I can repackage google.com's DNS response and sign it with my own DNS key, as long as the clients of my server(s) 'trust' that I am Google, they will accept it as such and that is the entire point of security.

The simplest fix for these issues is to simply delete your company's and Microsoft's CA (if they use AD) from your computer - problem solved, it will no longer trust your company and you probably won't be able to get on the Internet either.

There is no physical way of avoiding MITM if you trust the Man that sits In The Middle. Even quantum physics can't help you.

Re:What happened to the alternatives to SSL/TLS?

[jonwil]

The way DNSSEC works is that everything ties back to the root namesevers and their special keys.
Unless you replaced the root DNS trust anchor in the OS/browser on every single system on your network (something that any well-written OS/browser should make it VERY hard to do) AND re-signed every single DNS request made through that network with a new set of keys chained off that new root trust anchor, you wont be able to defeat DNSSEC.

Its not like SSL where you can just add a certificate from your HTTPS-inspection tool into the root trust store on all the machines on your network (something that most browsers/OSs make easy to do) and MITM things that way.

Of course I could be wrong and there may be an easy way to MITM DNSSEC if you control all the end points AND the DNS server they talk to (but I cant find any evidence of that)

Re:What happened to the alternatives to SSL/TLS?

[Anonymous Coward]

it works and should be adopted, you can tell since none of the big companies want to use it, they havent found an ez MITM. I just wish these retards would stop trying to get at our communications, when xerox machines were invented we didnt fucking photocopy every piece of mail and put in in a vault "just in case", and i really don't get why that should be the case now.

Re:What happened to the alternatives to SSL/TLS?

[tepples]

Unless you replaced the root DNS trust anchor in the OS/browser on every single system on your network (something that any well-written OS/browser should make it VERY hard to do)

I don't see how that'd work. Even if it's hardcoded into the kernel, someone who controls all endpoints on a LAN can just recompile the kernel from source with a patch that changes the trust anchor to that of the MITM.

Re:What happened to the alternatives to SSL/TLS?

[jonwil]

Not if you are on Windows (the kind of organization that would be doing MITM of this sort is likely going to be the kind of organization that runs Windows)

Re:What happened to the alternatives to SSL/TLS?

[tepples]

Windows supports multiple DNSSEC trust anchors (source) and deploys them through Active Directory Domain Services (source).

Re:What happened to the alternatives to SSL/TLS?

[guruevi]

As you say, you have to insert the DNS trust anchor in the OS, just like you insert the CA in every OS you control for these proxies to work. Re-signing or filtering out the DNSSEC for a request is trivial at that point (basically make it appear as if the entire DNS tree doesn't have DNSSEC).

Wordfence recommends not using Cloudlfare

[Anonymous Coward]

Here wordfence recommends not using Cloudflare:
https://www.wordfence.com/blog...

"In Alert TA17-075A, US-CERT is referring to HTTPS interception products that are used on corporate networks. We extend this point of view to any HTTPS interception products, including cloud WAFs."

Re:If it's unzipping encryption it has to re-zip i

[sexconker]

Use certificate pinning. Yeah, you won't be able to get out over the corporate shit without first tunneling elsewhere, but your coporate spues won't be able to see your shit if you pin to known good certs.

s/some/all/g

[Anonymous Coward]

Fixed TFA.

Re:If it's unzipping encryption it has to re-zip i

[guruevi]

The problem with SSL-unpacking proxies is the following:
- You can't pass along the original SSL certificates, so your clients all have to trust the SSL proxy
- You can't verify with your clients whether the SSL certificate is correct, so you have to either accept or deny all 'broken' SSL certificates.
- Since a significant portion of SSL implementations are expected to be broken (especially once you start dealing with parties like Microsoft, IBM and Oracle), your implementation also has to be broken.

Many security tools are a security risk

[FeelGood314]

Anti virus and sand boxing programs such as Invincia run as root. (any program that requires root to sand box a user space program is just a bad idea). The quality of programming and design that goes into some of these programs is appalling. It would be nice to educate employere not to click on every link and to be suspicious of certain emails but unfortunately most corporations find it too inconvenient to actually authenticate their corporate emails so a vigilant employee would miss any company wide notifications.

Re:If it's unzipping encryption it has to re-zip i

[tepples]

DNS can be sent down the SSH tunnel.

Even if this proxying feature were disabled, the network administrator could still see hostnames. They're in cleartext in the Server Name Indication field of the ClientHello message of any modern TLS connection.

HTTP/1.1 526 Invalid Server Certificate

[tepples]

You can't verify with your clients whether the SSL certificate is correct, so you have to either accept or deny all 'broken' SSL certificates.

That or the proxy could return a 526 ("Invalid Server Certificate") status. (The 52x status codes are defined not by any RFC but unofficially by the Cloudflare reverse proxy service.) The response body describes the problem and displays the details of the certificate that the proxy does not trust. If the user logged into the proxy has "Allow" privileges, the body contains an "Allow" link to let this particular device use this particular upstream certificate despite its use of an unknown issuer or obsolete cipher suite. The IT department can view exceptions in effect.

Re:HTTP/1.1 526 Invalid Server Certificate

[guruevi]

And as you said, this is a single-vendor workaround and works only if you're interactive.

Modern TLS has not been SHAttered

[tepples]

Even if a bank were to print out their certificate hash, you can technically generate another certificate with the same hash

Good luck with that. For one thing, the existing SHA-1 attack is a collision, not a preimage, which is orders of magnitude harder. For another, web browsers aren't supporting new SHA-1 certificates, and SHA-256 isn't in foreseeable danger of even a collision.

Certificate Transparency

[tepples]

Would prefer a system where issuance of a CA is a matter of real-time verifiable record [...] blockchain might help here

Such a system is being built in response to the DigiNotar fraud of 2011. It's called Certificate Transparency. And like Bitcoin, it uses a Merkle tree. Chrome already requires it for EV certificates and for certificates issued by Symantec.

Re:Certificate Transparency

[jddj]

That sounds promising. Thanks for the heads-up.

Re:If it's unzipping encryption it has to re-zip i

[Anonymous Coward]

But how do you do this on a phone?

SSH only tunnels TCP, DNS is UDP. You can use socat locally and remotely to transport the local udp request through tcp tunneled over ssh, but that more or less requires a complete Linux/Gnu environment on the phone AFAIK, requiring rooting it and installing something like Debian and setting up way to execute scripts in a chrooted environment.

Is there an easy way yo do this?

VpnService; DNS over TCP

[tepples]

But how do you do this on a phone?

By installing an app that extends android.net.VpnService . Or by tethering your GNU/Linux laptop.

SSH only tunnels TCP, DNS is UDP.

DNS can run over TCP. In fact, many DNSSEC responses are so big that they have to (source).

Re:Wahhhhhh??

[Anonymous Coward]

It does break SSL, SSL is meant to be point to point, this is a MITM attack.

if your traffic is being intercepted and decrypted before it reaches the destination, then that means that it is breaking the entire concept around what is supposed to make SSL secure.

Re:Wahhhhhh??

[JohnFen]

It does break SSL, SSL is meant to be point to point, this is a MITM attack.

Perhaps I'm splitting hairs here, but this is not a MITM attack on SSL. The SSL protocol in this situation is behaving just fine. This is a MITM attack on HTTPS, a layer higher than SSL.

Re:If it's unzipping encryption it has to re-zip i

[JohnFen]

I connect with my VPN without using DNS, and once connected, all traffic goes through the tunnel, including DNS lookups.

Re:If it's unzipping encryption it has to re-zip i

[JohnFen]

Teppies is correct, but my approach is a bit different. For safety, I tunnel all UDP traffic as well (not just DNS lookups) using a TCP wrapper.

What ads? I don't see any here (or anywhere)

[Anonymous Coward]

See subject: Via APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/

Ads & malware rob speed/security/privacy

Hosts add speed (via hardcodes/adblocks), security (vs. bad sites/malware/poisoned dns), reliability (vs. dns down), & anonymity (vs. dns requestlogs/trackers).

Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity & faster vs. addons/routers/remote dns!

Avoids DNSChangers in routers/IP settings & dns redirects (99.999% of ISP DNS != patched vs. it) + lightens DNS load & resolves faster from local system RAM!

* Via what u NATIVELY have built into the IP stack in FASTER kernelmode!

APK

P.S. - Safe https://www.virustotal.com/en/file/e01211ca36aa02e923f20adee0a3c4f5d5187dc65bdf1c997b3da3c2b0745425/analysis/1433430542/

Hosts do more for less vs. addons & faster

[Anonymous Coward]

What hosts do addons can't (or as well):

PROTECT vs.:

1.) bad sites (past ads)
2.) fastflux C&C
3.) dynDNS C&C
4.) DGA C&C
5.) DNS down
6.) poisoned dns
7.) trackers (dnsrequestlogs/ads/transparent ISP proxy)
8.) spam/phish payload
9.) dns blocks
10.) slowdown 2 ways: adblocks & hardcodes

11.) Multiplatform
12.) Ez data edit
13.) Efficiency (cpu/ram/I-O)

14.) UBlock no DNS bennys = poor imitation = "sincerest form of flattery"
15.) NoScript tag parses. Hosts block ad script before it downloads!

APK

P.S.=> AB+ 151mb http://cdn.ghacks.net/wp-content/uploads/2014/06/adblocker-memory-consumption.jpg/

UBlock 64MB http://cdn.ghacks.net/wp-content/uploads/2014/06/adblocker-memory-consumption.jpg/

(hosts ~6mb)

ClarityRay defeatable

Don't work http://www.businessinsider.com/google-microsoft-amazon-taboola-pay-adblock-plus-to-stop-blocking-their-ads-2015-2/

SLOWER: http://superuser.com/questions/686041/which-leads-to-faster-browsing-an-ad-blocker-or-an-edited-hosts-file/

no stupid...

[Gallomimia]

All of them do. They completely smash and destroy it, and then fool you into thinking it's safe.