[cryptography] Gogo inflight Internet uses fake SSL certs to MITM their users

Patrick Mylund Nielsen cryptography at patrickmylund.com
Thu Jan 8 18:40:38 EST 2015

On Thu, Jan 8, 2015 at 6:35 PM, Jon Callas <jon at callas.org> wrote:

> Well, I'll be. I am on a Gogo-enabled flight even as we squeak, and I just
> turned my VPN off to go get you one of their certs. They're letting me get
> to YouTube and Vimeo just fine now. I guess someone got some sense. It was
> pretty hamfisted and really just reminded me to turn on my VPN.

I've been on several Gogo flights recently (before and after this came up)
and not noticed any SSL interception. Maybe they're only doing it on some
flights/flights that have the latest version.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.randombit.net/pipermail/cryptography/attachments/20150108/49a639a0/attachment.html>

More information about the cryptography mailing list