[cabfpub] China MITMing icloud.com

[Ben Laurie]

On Wed Oct 22 2014 at 2:17:15 PM Rich Smith <richard.smith at comodo.com>
wrote:

> Dear 360 Browser staff,
>
> Thank you for this response.  As noted by others, I think your product
> needs some further work to be considered truly secure against these kinds
> of attacks, however I am glad to know that the original article's
> allegations seem to be unfounded.
>

The original article says "Internet users in China should first use a
trusted browser on their desktops and mobile devices - Firefox
<http://www.firefox.com.cn/> and Chrome
<https://en.greatfire.org/www.google.cn/chrome> will both prevent users
from accessing iCloud.com when they are trying to access a site that is
suffering from a MITM attack. Qihoo’s popular Chinese 360 secure browser is
anything but and will load the MITMed page directly."

which appears to be exactly what has been confirmed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20141022/8a58c107/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 11972 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20141022/8a58c107/attachment.jpg