Transport encryption and certificate trust

Pen Test Partners retires the coffee shop hacker from the awareness deck

The firm's argument is that ubiquitous TLS moved the risk off the wire and onto patch state, fake login pages and certificate warnings people click through. That is where the training hour should go.