Networking Forums

Networking Forums > Wireless Networking > Wireless Internet > how secure are https sites over wireless at a public library ?

Reply
Thread Tools Display Modes

how secure are https sites over wireless at a public library ?

 
 
surf
Guest
Posts: n/a

 
      06-04-2006, 09:42 AM
if I type in a password over a https site at the library wireless
network , how easy would it be for someone to get my password ?

 
Reply With Quote
 
 
 
 
hackman_3vilGuy
Guest
Posts: n/a

 
      06-04-2006, 04:37 PM
Impossible.

https connections are SSL secured between you and the web server and
anybody intercepting the communication would be unable to decrypt the
data so you can use a public hotspot to go on secure sites (though make
sure it is actually secure as people can hijack routers and serve up a
fake but non-secure version of PayPal).
http://wi-fi-hotspot.blogspot.com http://thehackman.blogspot.com
http://adsensical-adsense.blogspot.com

 
Reply With Quote
 
David Taylor
Guest
Posts: n/a

 
      06-04-2006, 07:28 PM
> Impossible.

Not quite.

> https connections are SSL secured between you and the web server and
> anybody intercepting the communication would be unable to decrypt the
> data so you can use a public hotspot to go on secure sites (though make


In general yes I agree with your sentiment that it's secure but SSL is
susceptible to a man in the middle attack. The OP would need to ensure
that the certificate matched that of the site and was thus the correct
certificate.

Second and yes i'm being picky here, the SSL is not necessarily between
client and web server. The chain can be broken. For example with
Microsoft ISA server, it's common practice to import the web servers
certificate into ISA server since it's actually ISA server that's
publishing the web site. It can be the same or a different or no
certificate at all used between ISA and the actual web server.

In other words, depending on the configuration of the site, the SSL
session exists between the client and the public facing server, the
internal communications between the ISA server and web server can be
normal HTTP and thus available for sniffing on the internal LAN.
Accepted this is not where the major thread would be expected and it
would be a poorly configured system but it can be set up this way.

David.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS issue on public library free wi-fi? JP Wireless Networks 2 08-04-2008 01:55 PM
Can't access internet at public library Wi-Fi mudturtle74 Wireless Internet 2 07-02-2007 02:26 AM
Wireless cafe public library? Mr. Arnold Wireless Internet 6 04-29-2007 03:09 PM
why not have https for all sites scott_doyland@johnlewis.co.uk Wireless Internet 6 09-01-2006 07:13 PM
Explorer not opening http sites while https sites work Hendrik G. Seliger Windows Networking 0 09-13-2005 09:12 PM



1 2 3 4 5 6 7 8 9 10 11