[cryptography] Gogo inflight Internet uses fake SSL certs to MITM their users

Patrick Mylund Nielsen cryptography at patrickmylund.com
Thu Jan 8 18:40:38 EST 2015


On Thu, Jan 8, 2015 at 6:35 PM, Jon Callas <jon at callas.org> wrote:

>
> Well, I'll be. I am on a Gogo-enabled flight even as we squeak, and I just
> turned my VPN off to go get you one of their certs. They're letting me get
> to YouTube and Vimeo just fine now. I guess someone got some sense. It was
> pretty hamfisted and really just reminded me to turn on my VPN.
>

I've been on several Gogo flights recently (before and after this came up)
and not noticed any SSL interception. Maybe they're only doing it on some
flights/flights that have the latest version.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.randombit.net/pipermail/cryptography/attachments/20150108/49a639a0/attachment.html>


More information about the cryptography mailing list