Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 09-17-2015, 04:01 AM   #1
Baseband Member
 
Join Date: Mar 2014
Location: Czech Republic
Posts: 63
Default What knows man in the midle when using HTTPS?

Hello,

when i visit httpS://somedomain.com
and navigate to some subpage on that domain, my internet provider can know that subpage URL or title and only thing that is encrypted are that webpage texts, images + submitted form data?

or ISP do not even know which domain i accessed at first place when i used httpS ? Thank you
__________________

postcd is offline   Reply With Quote
Old 09-17-2015, 04:50 AM   #2
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 8,006
Default Re: What knows man in the midle when using HTTPS?

If your traffic is encrypted and assuming that a proper safe and secure algorithm is used, and the private keys of the server have remained private (i.e the key to unencrypted the traffic) No they could not see the content of your traffic.

I think that you are misunderstanding the terms man in the middle,
it's not like there is someone over hearing a conversation.

lets say that there is you and Alice talking.

you call out to Alice, Alice replies saying I'm here.
you ask Alice something, and Alice replies to you. (that's the normal conversation)

a man in the middle attack is more like.

you call out to Alice but Bob, cleverly disguised as Alice replies. and then bob calls out to Alice.
Alice replies I'm here to Bob, and Bob tell you "Hi I'm Alice"

So then you ask the person that you think is Alice (i.e bob) a question.
and Bob asks Alice, Alice replies to bob, and bob send on that message to you. the whole time you think that you're talking to Alice. but actually you;re talking to bob, who has tricked you into thinking that he is Alice.

if you're asking the weather, probably not a big thing.
if you're doing your on-line banking, that's an issue since a part of that will involve transmission of usernames and passwords, and account details etc.


yes, the ISP knows what site you're connected to, even if they can't see the data because it's encrypted.
__________________

__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Old 09-29-2015, 02:41 PM   #3
Fully Optimized
 
Draygoes's Avatar
 
Join Date: Nov 2014
Location: United States
Posts: 1,653
Default Re: What knows man in the midle when using HTTPS?

Best explanation I have ever seen. I have tried to answer similar questions, but it has been much more difficult.

Do you mind if I borrow this?
__________________
Will have a youtube channel up soon. Link will be here if I remember.
Draygoes is offline   Reply With Quote
Old 09-29-2015, 04:30 PM   #4
Baseband Member
 
Join Date: Jul 2015
Location: Australia
Posts: 46
Default Re: What knows man in the midle when using HTTPS?

I use the free version (Personal) of KeyScrambler which encrypts text on the fly that I post in to forms on forums etc.

I find that this is enough for my needs, but if you want more protection the Pro. and Premium versions are reasonably priced.

https://www.qfxsoftware.com/download.htm
spellunker is offline   Reply With Quote
Old 09-30-2015, 03:41 AM   #5
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 8,006
Default Re: What knows man in the midle when using HTTPS?

Quote:
Originally Posted by Draygoes View Post
Best explanation I have ever seen. I have tried to answer similar questions, but it has been much more difficult.

Do you mind if I borrow this?
go ahead. -of course I don't mind!
__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 01:54 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0