Slashdot: Google Chrome Will Soon Detect Man-in-the-Middle Attacks

0

0

Google Chrome Will Soon Detect Man-in-the-Middle Attacks
Published on September 10, 2017 at 03:34PM
An anonymous reader writes:
Google Chrome 63 will include a new security feature that will detect when third-party software is performing a Man-in-the-Middle (MitM) attack that hijacks the user’s Internet connection…. Most MitM toolkits fail to correctly rewrite the user’s encrypted connections, causing SSL errors that Chrome will detect. The new Chrome 63 feature is in the form of a new warning screen. This new error will appear whenever Chrome detects a large number of SSL connection errors in a short timespan, a sign that someone is trying — and failing — to intercept the user’s web traffic. This includes both malware and legitimate applications, such as antivirus and firewall applications. The new Chrome error won’t show up for all antivirus and firewall software, but only for those that do not rewrite SSL connections in a proper way, resulting in SSL errors.
Chrome 63 is set for release on December 5, but users can already test it by enabling it in the Google Chrome dev branch.

Read more of this story at Slashdot.

John Jason Fallows

See author's posts