blocking of secure traffic

[Biob]

Anyone else notice over the last few months that encrypted traffic to site/Vpn seems to be blocked when using the three network? Looked like it was trying to downgrade the connection to a insecure method.

It felt like a poorly implemented man in the middle attack. Seems to have improved since three’s last network outage.

Browser reporting the SSL certificate s don’t match for well known sites. Switched to WiFi and no problem.

is there something three needs to disclose to it’s customers? Looking online, I don’t believe I’m the only one experiencing this.

[jr0]

red pill or blue pill?
I think Three employees have far bigger concerns and work to be done than trying to gather/spy/manipulate/.. what their costumers are doing. I think they don't have any interest on this sort of thing, as the likes of FB, G, open Ai,...
If they do, their priorities are a tiny bit messed up.

Now some people here have complained about not being able to connect to some VPN and gaming services and that was because of IPv6 APN. Have you looked into your router config? Although what you are reporting about SSL certificates, imo, doesn't make any sense so yeah I never ever experienced such on Three or EE or  Vodafone.

[Biob]

And it’s not like three haven’t been compromised in the past, is it?

It just look suspicious when your connection to you mobile phone operator appears compromised. They are in control of that, unlike WiFi.

[Biob]

Who said anything about three employees? 
The SSL issue I have seen was with big companies like Amazon, bank etc… high value sites. If like me your phone spends most of the time connected to wifi, you might not see it, it’s when it’s connected direct to their network. 
Not had an issue since the last time they had problems I.e. not being able to call, no 999.

If you check the community properly, others have experienced this. Search google, DuckDuckGo , others have experienced.

[jr0]

let me see if I'm understanding you correctly: are you saying that Three is doing "man in the middle attacks" - your own words - when their costumers (like you and me) are using celluar data and are connecting to https websites and VPN services? 

I did mention three employees because they are the one building, managing, running the network, and after the outage we all experiencied a few weeks ago and others before too, and also now with Vodafone in mix, I'm just thinking that the employees probably have bigger fish to fry.
To what gain would Three do what you are suggesting?

[Biob]

Do you work for three?

I ask as there appears to be people on the community pages, that defend three yet claim to be customers and receive likes from the same three employees. Looks suspicious. 
The effort you are putting into these posts is disproportionate to that of a customer that hasn’t experienced these issues.

[jr0]

Guess what, I just wrote a huge reply to your previous post dissing about Three but I didn't post it as I was bursting and had to go to the toilet. When I was back, grabbed the phone the page reloaded and the auto save didn't work for the first time or maybe they are really watching us!!

Give me another hour or so and I will reply to your previous post. I'm just here helping people because I like technology and telecoms... If that's a fault then I am guilty 

[Biob]

*for that 

[Biob]

Unsure why you’re so protective of three?  You appear too invested.
It’s totally possible that the three network has been compromised by external actors. 

what I was experiencing, had all the characteristics of a poorly implemented man in the middle attack! 
 If the level of security is being downgraded only when connected directly to the three network, but no problems seen over WiFi at work or home, what conclusion would you arrive at? One example is where I was trying to login to Amazon , I got a certificate mismatch while on the three network, joined wifi and attempted again and no issue.

Are you aware that the calls and data on the three network  appear to be routed outside the U.K. before coming back to the U.K.?

 
Three have a history of data breaches. No one officially from three, is denying my claim on here. If there wasn’t an element of truth, it would be denied.

And just to clarify, this has also been seen on my family members devices, it’s not exclusive to me!

[jr0]

I would not say invested on Three or any other particular mobile provider. As I said Im interested and like telecoms and IP networking. I also find fascinating this sort of theories.

Yes it is totally possible that Three as been compromised by bad actors, like any other organisation with IT systems. As they say, today you tomorrow me!

When bad actors compromise an organisation is usually for financial benefit of the first and and detrimental value, image,.., of the organisation.

In regard to what you are experiencing it totally looks something with you browser. If you read a bit about TLS(as SSL is deprecated) or https, and a bit about TCP/IP model, a bit about client server model, soon you will conclude that is the server role establishing the certificate and encryption keys used for Https. The server is also where the application/website is running and hosted. e.g. any website or app, let's say FB, Netflix, gaming service... So if there's a problem with certificates is either on the server side or eventually the client (your browser or the app on your phone). This to say that any mobile and fixed providers do the transport of the encrypted data between the client and server. And the only way to look into the encrypted data that being transported is by brute force attack and guessing the key of each particular session. Recently there was someone claiming they were able to brute force the highest spec of TLS but using quantum computing, that requires a lot of investment.

So I don't see what interest could Three or any other operator have on do such thing. And can you imagine a bad actor diverting or mirroring all traffic somewhere else, I'd say say it must be Tbytes or peta bytes of data.

About the data breaches, luckily I was not a costumer back in 2016. But I was caught on other famous data breaches.

Do you know where to, calls and data are being routed out and back to the UK?