Linked Questions
11 questions linked to/from How do I check that I have a direct SSL connection to a website?
116
votes
18
answers
20k
views
Does an established HTTPS connection mean a line is really secure?
From the view of somebody offering a web application, when somebody connects with TLS (https) to our service and submits the correct authentication data, is it safe to transmit all sensitive data over ...
- 2,749
97
votes
9
answers
111k
views
Can my company see what HTTPS sites I went to?
At work my company uses internet monitoring software (Websense). I know if I visit a https ssl-encrypted site (such as https://secure.example.com) they can't see what I'm doing on the site since all ...
22
votes
6
answers
20k
views
Is it possible for corporation to intercept and decrypt SSL/TLS traffic? [duplicate]
I found there are some companies claim that they offer service that can eliminate SSL/TLS blind spot, such as Blue Coat and Gigamon. Are they talking about some way of decipher the https content (...
- 321
24
votes
4
answers
28k
views
When is it appropriate to SSL Encrypt Database connections?
Let's say I have a web server I setup, and then a database server.
However, they are communicating locally and are behind firewall. In my opinion, no SSL is needed here right?
The only time to use ...
- 404
42
votes
3
answers
7k
views
What is an SSL certificate intended to prove, and how does it do it?
If I get an SSL certificate from a well-known provider, what does that prove about my site and how?
Here's what I know:
Assume Alice and Bob both have public and private keys
If Alice encrypts ...
- 2,764
23
votes
5
answers
3k
views
What is the best option for setting up a several sites supporting SSL on the same IP?
If multiple hostnames are hosted on the same IP, it's not straight forward to allow them to support https. What are the best options in terms of browser support and/or web server support?
- 2,265
16
votes
4
answers
2k
views
Is my Company Tracking Me?
Every time I try to connect to a site through HTTPS from my office computer, there is a Certificate Error thrown 2-3 times before showing the login screen. Till now I use to ignore this and click ...
- 163
16
votes
5
answers
10k
views
SSL Inspection and privacy
I know my company is testing something called "SSL Inspection" based on Websense, which is our proxy. I can not provide more detail about this, but does this mean that in principle all my SSL traffic, ...
- 263
10
votes
2
answers
19k
views
How does SSL Proxy server in company work?
Many companies use a network proxy in order to intercept web-based traffic for example.
I have some questions about their functioning:
1) I've never seen SSL warning in company. I doubt that they ...
- 737
8
votes
3
answers
3k
views
SSL inspection detection
An interesting question was recently asked about SSL inspection, and that got me wondering if it is actually possible, from the end user (or even server side), to detect if the SSL link is being ...
- 725
1
vote
2
answers
688
views
Is it okay from a security perspective to read foreign (untrusted) cookies in a trusted network?
From a security point of view, is it okay to read foreign (untrusted) cookies (from 3rd parties on the Internet) on your internal (trusted) network, or should you only read them within the DMZ areas ...
- 113