A screenshot showing that a connection to prod-ec-us-east-1.video.pscp.tv from my laptop returns a certificate issued by Allot to Allot for that domain name, vlaid for ten years and the certificate chain is not trusted.

Notices where this attachment appears

1. Chuso Pérez (chuso@fosstodon.org)'s status on Thursday, 21-Sep-2023 06:44:29 JST Chuso Pérez

   I'm getting a warning when I try to access https://prod-ec-us-east-1.video.pscp.tv about an untrusted certificate valid for 10 years issued by Allot to Allot, which seems to be an Israeli company that does DPI among other things.

   When I try to access the same domain name from one of my VPSs, I get a 1-year valid certificate issued by DigiCert to Twitter (which is the real owner of the domain name).

   From both places, the domain name resolves to the same IP address.

   Am I being MITMed by my ISP??

   #Infosec #DPI