1

This question is similar to this but for my network admin.

For example, when I enter this URL: https://www.google.com/search?q=example or ... I can see the word example that I was searching on Google.

Can my network admin see this URL and see what I searched? Can he see the decrypted traffic even if the web site uses SSL?

marked as duplicate by Philipp, schroeder Dec 3 '15 at 16:06

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • @Philipp He said (network admin) not ISP, he is talking about a LAN – Ulkoma Dec 3 '15 at 11:17
  • @Ulkoma it's still exactly the same situation. There is no technical difference between a LAN in a company and a WAN of an internet service provider which matters in this situation. – Philipp Dec 3 '15 at 12:22
  • @Ptx ViewCare Even if website is using SSL, the traffic can be decrypted in case of "Man in The Middle Attack"(MiTM). See security.stackexchange.com/questions/65794/… – roguesecurity Dec 7 '15 at 4:57
3

If he can see the traffic relies on the encryption. If you visit webpages delivered by http he is able to monitor everything. If you use https the traffic is encrypted. In a company it's anyhow possible to decrypt the traffic if the admin installed a fake CA which private key he owns. There are various tools that implement such a proxy functionality like Squid or MITMproxyif oyu just want to try it on your own. You can verify this by compüaring the OS/Browser CA-List with the one deliverd by the OS/Browser vendor.

Even if you use https and the admin isn't able to decrypt the traffic he is still able to find out which domains you connected to because you are using the company owned DNS-Server.

You can use TOR to hide both but there are some downsides. The usage of TOR can be detected by the network administrator and this makes you or at least your PC suspicious because TOR is often used by malware.

You can use a VPN which is also detectable but not as suspicious as using TOR.

The best solution for your problem might be using your personal PC/Laptop at home.

-1

Can my network admin see this URL and see what I searched?

neither yes nor no. He can't see the URL, but he can see the IP, which is easy to resolve for him (just enter the url into a browser..!).

Can he see the decrypted traffic even if the web site uses SSL?

99.999% NO. everything between you and the URL is encrypted via TSL. He can't get any informations other than the ip address you visited - as soon as your handshake with google is done, everything else is encrypted.

TLS is indeed not totally bulletproof, but mostly. for more information on potential vulnerabilities of 'https': https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

-1

Hi . Yes He can (but he must be professional In a Network and Security) . Always Use The Personal System For More Security. Best Way For anonymous Activity :

1. Use The Tor Network (Setup The Custom Bridges)

Or

2. For Paranoid Security : Buy The Window Server And Connect To The VPN And Remote On Sever The Start The Browsing On The Web. you Can Download The File From internet And Encrypt On The Server Then Download From You Server .

Or

3. Buy The Account From Trust.Zone And After the Install VPN Software Go To The Setting And Enable the Kill Switch Mode . After kill Switch Enabled All Traffic Only Send And receive under the VPN Tunnel .

Not the answer you're looking for? Browse other questions tagged or ask your own question.