Linked Questions

17
votes
6answers
15k views

Is it possible for corporation to intercept and decrypt SSL/TLS traffic? [duplicate]

I found there are some companies claim that they offer service that can eliminate SSL/TLS blind spot, such as Blue Coat and Gigamon. Are they talking about some way of decipher the https content (...
13
votes
1answer
1k views

Which parts of an HTTPS connection can be revealed? [duplicate]

Say, I use a public WiFi connection to load https://google.com in the browser, and then continue browsing on that site for a few more pages (performing searches in Google). Can anyone else (like ...
1
vote
3answers
11k views

What information can my network admin see when I visit a website? [duplicate]

This question is similar to this but for my network admin. For example, when I enter this URL: https://www.google.com/search?q=example or ... I can see the word example that I was searching on ...
0
votes
1answer
420 views

How to obfuscate outgoing traffic if we don't want to use VPN? [duplicate]

If we say that I cannot trust my internet-service-provider regarding privacy, how can I obfuscate the outgoing traffic on my line? So the ISP will not see that what am I actually doing. Randomly ...
0
votes
1answer
145 views

Connect to HTTPS through untrusted proxy [duplicate]

As far as I know, and please correct me if I'm wrong, I can connect to an https site (assuming the whole page is https) while using a free proxy server I find on the web (and entered into Firefox's ...
-1
votes
1answer
88 views

When I visit a site using HTTPS is it exposed to sniffers? [duplicate]

Say for example I visit https://foo.com. Could someone that is sniffing the network determine that I am going there? At what level does the https encrypt the request? I know that data is secured ...
0
votes
1answer
81 views

unravelling of https sessions by corporate web proxies? [duplicate]

Like many people I work within a company that deals with internet access of its employees by providing a proxy server. Although i got the idea that a https session encrypts, from peer to peer, all ...
-8
votes
2answers
87 views

Securing our browsing history and data [duplicate]

Can our ISP's view our traffic and browsing data even when we are using HTTPS protocol? Is it the same for VPN? How can we secure our data from our ISP's?
72
votes
9answers
9k views

Why is HTTPS not the default protocol?

Why is HTTP still commonly used, instead what I would believe much more secure HTTPS?
65
votes
6answers
52k views

Does SSL/TLS (https) hide the urls being accessed [duplicate]

Suppose I type this in my browser https://www.mysite.com/getsecret?username=alice&password=mysecret and an attacker is watching all traffic from me to my ISP. What information is protected by ...
65
votes
3answers
7k views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

For example, say the following are HTTPS URLs to two websites by one IP over 5 mins: "A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2". Would monitoring of packets reveal: nothing, reveal only ...
23
votes
5answers
7k views

Can a VPN Provider MitM my SSL traffic without me noticing?

If I connect to lets say gmail over a VPN. How does the provider forward the traffic without exposing my IP, but also without breaking the SSL. Shouldn't gmail know my real IP if the traffic just gets ...
15
votes
4answers
2k views

Is my Company Tracking Me?

Every time I try to connect to a site through HTTPS from my office computer, there is a Certificate Error thrown 2-3 times before showing the login screen. Till now I use to ignore this and click ...
11
votes
6answers
3k views

Getting credentials using proxy server

Is it possible to get the username and password we enter into sites like facebook using proxy server? The scenario is like this : 1.My laptop is connected to a network. 2.It is configured to use a ...
11
votes
3answers
16k views

How do I check that I have a direct SSL connection to a website?

I always thought that if I had an SSL connection there would be no MITM attacks. Now it appears that isn't true (see comments in this question Is it okay from a security perspective to read foreign (...

15 30 50 per page