Tag Info

New answers tagged

0

An easy way to do an SSL-strip attack is, when you offer a WLAN access point at a place where already a public access point exists (Moxie Marlinspike did this to demonstrate SSL-strip). As soon as somebody connects via your access point and visits a website with the HTTP protocol, you can read everything he sends and return everything your want. If the first ...


2

Not all links are restricted to your initial request; if you include the protocol (e.g: http or https), then you can jump between both. If you just have relative URL locations (such as: "/dir/page.php" instead of "https://site.com/dir/page.php"), then you'll stick to the same protocol. Websites can implement Hypertext Strict Transport Security, this will ...


0

Well yes seen as your now browsing the internet with cleartext requests and responses but only would prove a big issue with accounts as you mention. It wouldn't be an issue if your were browsing google per se. Moxie Marlinspike has done a lot of research into the SSL/TLS protocols and created a tool called sslstrip:here!. Thus the only threat is the attacker ...



Top 50 recent answers are included