Learning Python Network Programming

(Sean Pound) #1
Chapter 7

Interestingly, if any other fake web server wants to pretend to be the Google's web
server, it simply can't do that, provided that you check the SSL certificate that is
signed by an accredited certificate authority, unless an accredited CA has been
compromised/subverted. This form of attack to your web browser is commonly
referred to as the man in the middle (MITM) attack.


Inspecting standard SSL client/server communication


The following screenshot shows the interaction between the SSL client and the
remote server:

Free download pdf