Linked Questions

69
votes
6answers
54k views

Does SSL/TLS (https) hide the urls being accessed [duplicate]

Suppose I type this in my browser https://www.mysite.com/getsecret?username=alice&password=mysecret and an attacker is watching all traffic from me to my ISP. What information is protected by ...
18
votes
4answers
11k views

Can URLs be sniffed when using SSL? [duplicate]

I know that http requests can be sniffed, so sniffer can see the requested URL from the victim. So 2 days ago I my bank made me a web-account to see, send money etc... The thing I saw is my session ...
12
votes
4answers
19k views

What information can my ISP see when I visit a website? [duplicate]

For example, when I enter this URL: https://www.google.com/search?q=example or http://www.google.com/search?q=example I can see the word example that I was searching on Google. Can the ISP see this ...
8
votes
4answers
15k views

Is it possible to sniff HTTPS URLs? [duplicate]

From many posts, I know that almost everything in HTTPS or SSL connections is encrypted. Still, I am wondering, if it is possible to get the URLs out of such a connection if the computer that opens ...
1
vote
6answers
414 views

Can people know the server I'm connecting to despite being on SSH/HTTPS? [duplicate]

I understand that by connecting securely over SSH or HTTPS, the data that I transfer is cryptographically secure. However, can someone spying on my connection still determine the server I'm sending it ...
0
votes
2answers
618 views

Does SSL/TLS (https) reveals your IP address? [duplicate]

Because the NSA monitors traffic going through the major nodes of the internet, they can know which IP address does what on your website, even if you are using HTTPS. Is this true or false?
0
votes
0answers
629 views

DO my ISP know what I downloaded from Alldebrid / Real-Debrid over HTTPS? [duplicate]

I want to download some files from Alldebrid & Realdebrid Servers. Obviously these have https protocol for accessing & downloading files. I dont use VPN. Do my ISP know what sort of material/...
1
vote
2answers
321 views

Why does not Google switch to POST method for queries? [duplicate]

With ISPs getting license to record and sell customer's traffic data, why doesn't Google switch to POST method for search queries to provide better security to the users, while HTTPS is already used?
4
votes
1answer
98 views

Would it be possible for an ISP to guess specific requests on an HTTPS site using package size? [duplicate]

In light of the recent senate decision in the US to allow ISPs to sell users' browsing history, I've been reading of recommendations on how users can retain their privacy. One of the common ...
0
votes
1answer
39 views

It is save to send sensitive data through URL parameters inside one service with SSL? [duplicate]

I was thinking about that topic, and I am a little bit confused. I am using SSL. There is some story: User click on the button "Give me X" Service 1 receive it, get userName from the session and ...
82
votes
9answers
88k views

Can my company see what HTTPS sites I went to?

At work my company uses internet monitoring software (Websense). I know if I visit a https ssl-encrypted site (such as https://secure.example.com) they can't see what I'm doing on the site since all ...
74
votes
9answers
10k views

Why is HTTPS not the default protocol?

Why is HTTP still commonly used, instead what I would believe much more secure HTTPS?
11
votes
4answers
4k views

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

The reason I ask whether HTTPS protects the metadata of your Internet activity from a wiretapping entity on the backbone like the NSA or not, is the following scenario: Say I am browsing the ...
6
votes
2answers
13k views

What can my ISP see in their log files if I use Google DNS?

For example, if I use my ISP DNS and open this page they will see: https://security.stackexchange.com/questions/ask It would show up in their logs for sure. But if I use Google DNS, then what ...
2
votes
1answer
4k views

How can police get someone's search history?

Sometimes I see news articles saying that someone was suspected of a crime so the police got their search history and found various google search terms etc. What are the possible ways they can do ...

15 30 50 per page