PUBLIC MARKS with tag https

Ettercap is a comprehensive suite for leading man in the middle attacks.

Set-Cookie Secure, Set-Cookie HttpOnly, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection

Explication d'un problème de sécurité : un CA racine peut distribuer des certificats intermédiaires permettant aux organisations de substituer les certificats et déchiffrer le traffic HTTPS. La solution pour le détecter : utiliser des extensions comme CertPatrol.

"an extension to the popular Firefox browser that contacts network notaries whenever your browser connects an HTTPS website"

To move forward, we first need to acknowledge that the current HTTPS SSL mechanism is completely broken.

Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP traffic between their machine and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and caching information). Charles can act as a man-in-the-middle for HTTP/SSL communication, enabling you to debug the content of your HTTPS sessions.