maemo.org - Talk - View Single Post - Nokia decrypting your SSL sessions

	erendorn	2013-01-23 , 08:00
	Posts: 738 \| Thanked: 983 times \| Joined on Apr 2010 @ London	#31

Originally Posted by The Wizard of Huz

So Nokia has access to the target site's key and the browser's key?

Nokia put Nokia's public keys in the browser to encrypt (regardless of the target site), and Nokia has Nokia's private keys to decrypt. Then Nokia has the sites public keys to reincrypt when traffic leaves their servers (towards the target site).

usual way:
browser <==(encrypted by FB's key)==> Facebook

compressed by third party's way:
phone <==(encrypted by Nokia's key)==> Nokia <==(encrypted by FB's key)==> Facebook

Last edited by erendorn; 2013-01-23 at 20:58. Reason: small change to arrows

Quote & Reply |

The Following 3 Users Say Thank You to erendorn For This Useful Post:
mr_pingu, ranbaxy, The Wizard of Huz