Re: don't follow the https'ers off the cliff... ;-)

Lew Wolfgang wrote:
> Since no one else is reporting similar issues, my latest hypothesis is 
> that a
> deep-packet-inspection intrusion prevention device somewhere on my 
> connection
> path is finding a false-positive hit in the binary and force-closing the
> connection.  I've checked on our local IPS (Tippingpoint) and don't see
> any hits, but there might be others farther upstream.  This is a very 
> large
> organization.
>
> So if my hypothesis is correct, a TLS connection to pacman would allow
> the updates to complete.
---
    Why would you think that?  If it is a large corporation, some of them
have already been noted to have subordinated root-certs that would allow
them to perform MITM inspection.  I.e. TLS wouldn't stop inspection.


-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]