Trying to see if company is performing MTM for SSL certs. Anyone konw a website that woudl tell you? Or better yet an SSL-EV website?

7/13/2012 1:47:38 PM

how exactly would a website inform you of someone intercepting your handshake when you'd presumably be going through the same MITM to get to said website

7/13/2012 2:29:10 PM

I wasnt aware if anyone had gotten past SSL-EV yet.

7/13/2012 5:11:45 PM

1. Note which authorities are used by many of the HTTPS-enabled sites you visit at home, like your bank, PayPal, GMail, or Wikipedia.

2. Note which authorities appear to be used by those same sites when you visit them at work; your company probably hasn't spoofed all of them.

Also IDK whether this would help your situation, but if you're a Firefox user you can try this: http://convergence.io/

7/13/2012 7:58:22 PM