|
|
Have you had any requests and/or plans on supporting http/ssl? Not really comfortable sending/reading pm's in cleartext...
Why??
are you sending your banking info or credit card #'s to people via PM?
Or are you having cybersex via this site??
Anyone with the ability to obtain the info you're sending is going to be intelligent enough to know there are much more lucrative(or juicy) sites to snoop.
+1....Originally Posted by reciprocity
Lol.
R e a d S l o w l y ! - Children at Play.
In other words, to the OP: please continue having cybersex, and no, there will not be any https...
I enjoy listening to the radio at a reasonable volume from nine to eleven.
As stated...I don't see the need for it.
"When you invite the whole world to your party, inevitably someone pees in the beer."
Visit Sponsors of GTAM!
I think the real want for it would be for people surfing from work. Where they should be working...
though I wouldn't mind that, my work banned all sites with the word forum in it.
x
https doesn't obscure where you're going, just the contents.
And these days, most companies have put in place https proxies which can actually peer into an encrypted web page. Yes, that includes your banking information.
well thanks cruisingrrl for the lonely voice midst this ugly mob.
ya it's a work thing and they don't use https proxies. I don't care if they see traffic to the forum, I just don't want my posts and etc going in the clear.
lol, a simple no woulda sufficed. Anyway, back to work! reciprocity, I replied to your pm
This is not easily done... and tad amount to a privacy violation in Canada. They would be well within their rights to block it 100%, but to sniff and view, I wouldn't want to be on the receiving end of that lawsuit.
Besides, they need to have keying material to do this on the application level, and that would almost require a court order to obtain.
Think about it, we are talking 128bit encryption that is secured with a certification authority, and they are not about to simply give out encryption keys of their clients (say Scotiabank) to some Network IT Guy because he wants to monitor all SSL traffic on his network.
I am not saying that it CANT be done, but I have yet to see it. (not that I am proactively looking) Most doing it will be operating under a court order (in cooperation with the certification authority) OR sniffing and hacking.
Maybe others have a different experience.
If it were easy to do, SSL 128bit encryption would be useless....
R e a d S l o w l y ! - Children at Play.
No, you don't need a court order. All you need is a Acceptable Use Policy signed by the employee that all computers and networks in the organization are to be used for Business Use Only and a warning that all traffic is monitored. You are working on company time and on company resources.
As for the technology, it's authenticated man-in-the-middle for all domain-connected PCs. The SSL proxy will have it's certificate signed by the domain's root cert and any connection to an outside SSL web server will first make an authenticated SSL connection to the proxy, then the proxy will make another SSL connection to the outside web server. Only works for domain-connected workstations.
http://www.bluecoat.com/solutions/bu.../sslvisibility
We can debate about whether it's legal or ethical, but the reality is that SSL proxies are already used by a lot of companies out there. Don't like it? Don't use corporate resources to do Internet banking or buy from eBay. Still don't like it? Find a new company to work for.
Last edited by Lightcycle; 10-28-2008 at 02:08 AM.
PM sent.
Howdy, Sailor!PM sent.
Posting Permissions
Reply With Quote
Bookmarks