| Author |
Message |
Edwardo
Joined: 26 Jun 2013
Posts: 42
|
 Posted: Fri 12 Jul 2013, 09:51 Post subject:
 Why does this forum not use HTTPS? |
|
Why does the forum not use HTTPS?
|
|
Back to top
|
|
 |
L18L
Joined: 19 Jun 2010
Posts: 2473
Location: Burghaslach, Germany somewhere also known as "Hosla"
|
| Posted: Fri 12 Jul 2013, 10:34 Post subject:
Re: Puppy Forum & HTTPS |
|
| Edwardo wrote: | | Why does the forum not use HTTPS? |
Tell me one good reason why it should use HTTPS 
|
|
Back to top
|
|
|
Edwardo
Joined: 26 Jun 2013
Posts: 42
|
| Posted: Fri 12 Jul 2013, 13:21 Post subject:
Re: Puppy Forum & HTTPS |
|
| L18L wrote: | | Edwardo wrote: | | Why does the forum not use HTTPS? |
Tell me one good reason why it should use HTTPS |
Good question. This is after all a public forum and anyone can read what is written by simply looking.
Despite this, I would prefer external parties to have as little knowledge of my connections as is possible, if that can be prevented. The less the better.
Perhaps I am being simplistic. I am not sure at this point. That is why I ask.
What do you think? I am here to learn. If you play chess and you want to learn from others but it may be better if your opponent was excluded from those conversations.
The use of HTTPS may prevent undesirables? I don't know. I would like to know. From what I understand HTTPS encrypts the conversation between you and the party with whom you communicate, HTTP does not do that.
|
|
Back to top
|
|
|
Flash
Official Dog Handler
Joined: 04 May 2005
Posts: 10655
Location: Arizona USA
|
| Posted: Fri 12 Jul 2013, 15:47 Post subject:
|
|
Https would be good for the login. After that, I don't see any need for an encrypted connection. Without https, if you log in over an open wireless network, anyone can see your password.
|
|
Back to top
|
|
|
Karl Godt
Joined: 20 Jun 2010
Posts: 3860
Location: Kiel,Germany
|
| Posted: Fri 12 Jul 2013, 17:00 Post subject:
|
|
| Flash wrote: | | Without https, if you log in over an open wireless network, anyone can see your password. |
In theory .
I am not sure about anything security related , but from the
"dumb guy's view" ,
I think that I would need to redirect the data steam onto my machine,
make a copy of the data to my HDD,
send the stream to it's goal destination and finally hexdump the copy to be able to read it .
I am not 1% clear about how such could be achieved in practice .
If anyone could point me to a good tutorial about how to copy/hexdump data send by other unknown dhcpd or pppd in the wireless range of network/modem chips , PLEASE !
|
|
Back to top
|
|
|
Semme
Joined: 07 Aug 2011
Posts: 3259
Location: World_Hub
|
| Posted: Fri 12 Jul 2013, 18:42 Post subject:
|
|
Sure, have John disable <sans-idera> off-site [img] links.
Keep'm forum-side and remove the possibility of broken ones in the future.
Two with one fell swoop..
"I would prefer external parties to have as little knowledge of my connections as is possible.."
|
|
Back to top
|
|
|
Barkin
Joined: 12 Aug 2011
Posts: 604
|
| Posted: Fri 12 Jul 2013, 21:24 Post subject:
|
|
| Karl Godt wrote: | | If anyone could point me to a good tutorial about how to copy/hexdump data send by other unknown dhcpd or pppd in the wireless range of network/modem chips , PLEASE ! |
There's an app for that ...
http://en.wikipedia.org/wiki/Kismet_%28software%29
http://en.wikipedia.org/wiki/Tcpdump
http://en.wikipedia.org/wiki/Aircrack
http://en.wikipedia.org/wiki/Wireshark
http://en.wikipedia.org/wiki/Promiscuous_mode
|
|
Back to top
|
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
Forum index » Off-Topic Area » Security
