Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 3 down vote favorite
1

My ISP uses a software that replaces site certificates with it own certificate so secure pages are always untrusted. Is there any solution for this? Is it safe to proceed with the resulting sites (including gmail)?

share|improve this question

1 Answer

up vote 6 down vote accepted

No, proceeding is not safe; your ISP is performing a man-in-the-middle attack on your encrypted traffic, and can therefore read all traffic if they choose so.

Is there any solution for this

Yes: Get a new ISP.

As a side note:

I am very surprised; I have never heard of an ISP doing this, and I would not even consider such a company a proper ISP (since they don't provide the service of an ISP, which is sending and receiving the data that you send or want to receive).

What ISP is this? I can't imagine any regular ISP doing this.

share|improve this answer
2  
I'm shocked as well, that's an incredible security vulnerability. I would contact your ISP immediately. It could be someone in between you and the site pretending to be your ISP. – Josh K Aug 17 '10 at 3:18
So, aren't there any workaround for this? e.g. saving the good site certificate to a file and force using them ...etc? – mmonem Aug 17 '10 at 3:28
4  
Unfortunately, no. You might be able to find some loophole where they don't filter all of the traffic, or you might be able to set up some sort of VPN to provide a path outside of the network (which is just another kind of loophole), but if they're at all clever and serious about this behavior the answer is no. – Slartibartfast Aug 17 '10 at 4:48
3  
The name! What's the name man! The name of the ISP?! – chiggsy Nov 3 '10 at 5:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.