• 0 Posts
  • 53 Comments
Joined 1 year ago
cake
Cake day: July 15th, 2023

help-circle











  • As others have mentioned, a trusted 3rd party signs the correct key so your browser can check the key itself.

    However, it should also be noted that your browser must have a list of trusted 3rd parties and their certificates used for signing in order to perform this check. It’s entirely possible to modify this list yourself. Some examples include:

    • executing your own MITM style “*attack” in order to intercept and analyze local https traffic
    • corporate network inspection and monitoring, where a gateway does the above for all devices on the network which have a CA cert pre-installed through some policy

    So while it’s possible for trusted 3rd parties to issue valid certificates to bad actors, it’s also possible to add anyone (you, your employer, or some bad actors) to the trusted parties list.


  • That may be, but I’m not sure that’s a problem for a communication platform. I remember one time when they moved the share screen button around and some less tech savvy users thought the feature was removed!

    Teams has something like chat threads too. E.g. you can reply to a message in a channel and it groups all replies, and you can also focus that thread if you want. But I agree it isn’t hidden “off the main topic” quite like slack threads.