when good ssl configs matter

failgogo /aircell llc do airline wifi, and they where caught issuing self certified ssl certs for google there are tools to prevent them and its worth looking at some of those dns things (my blog) that mean the wrong certificate means no access.

Or alternatively ip route blacklist or prohibit.

12.130.115.0/24 Aircell LLC SID-15031 Address: 1250 N Arlington Heights Road Suite 500
74.205.236.96/29

That will stops gogo dead and if everybody did this would leave many gogo customers with an unhappy experience of inflight wifi.with there partners.

untrustworthy sir ian blair

untrustworthy sir ian blair

If your going mitm ssl then maybe you should not be.and thus deserve the no access rules.

tls remains fun with dogs and ghosts so blocking aircell will hopefully send a message about shady people.

One response

  1. Pingback: going ssl ‘green’ | Bananas in the Falklands

by golly but...

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s