Re: Mozilla Cloud non-Decryptable Download?

Julien Vehent <[email protected]>
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
On Sun  1.Nov'15 at 13:22:25 +0100, [email protected] wrote:
> I'll be greateful for any clues helpful to my decrpyting of that download.

Your PCAP indicates the source IP is a cloudfront endpoint, which we use
to distribute updates, tracking protection, addons and so on. None of
those binaries are encrypted, only the transport is secured with TLS, so
if you get the cleartext traffic you'll obtain the cleartext binary.

- Julien

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
signature.asc (application/pgp-signature, 473 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWNi4cAAoJEKPWUhc7dj6PG9YIANw7fx2Xn0NQtrAEjIlM88fU
GVjl2PoVakC8D3j3UpQraWwyZYFqKzmi8Xk5WlnckDgkQlh/5JgxtRsIRePFCGOB
5uhxzsvoHAczJs7SEJci8BgF1XH7Ogdd0Cq7uRWjr27ELH8pc7tgkJjGFTOmdeLI
+Z0M0gE0QOvRW7TCboiPSuAjbc0YdmK+nsc4iu05mqCgiCKvmQv6OHB/inNKmUBe
dmBdXD142U+gbSUfJKsioqCqOEzupBYgsIHiKfFHox0aGHZF2AHxWmmFKAvK/r41
GI0uyAo0GxS83CJ1W6OA0057O8ITXkEDKHgvWkbffj4X/WKbcx97E6E6iIELZ/4=
=n1CF
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.