|
Web Application Security
RE: Security tool for monitoring HTTPS traffic? Feb 25 2004 10:18AM John Reilly (JReilly eSpatial com) (3 replies) Re: Security tool for monitoring HTTPS traffic? Feb 26 2004 11:29AM lists AT dawes DOT za DOT net ("lists AT dawes DOT za DOT net" securityfocus com) Re: Security tool for monitoring HTTPS traffic? Feb 26 2004 11:26AM Thomas Chiverton (thomas chiverton bluefinger com) |
|
|
Privacy Statement |
> > Are they products they can look inside HTTPS traffic? Some
> > customers doesn't
> > trust HTTPS traffic going inside the company over the proxy!
>
> There is no way to look at the plain text content inside the https traffic
> - that would defeat the whole purpose of https.
4 words: Man in the middle.
It's perfectly possable to intercept the inital exchange, and present the
apperence of HTTPS, while evesdropping on the plain text.
--
Tom Chiverton
Advanced ColdFusion Programmer
Tel: +44(0)1749 834997
email: tom.chiverton (at) bluefinger (dot) com [email concealed]
BlueFinger Limited
Underwood Business Park
Wookey Hole Road, WELLS. BA5 1AF
Tel: +44 (0)1749 834900
Fax: +44 (0)1749 834901
web: www.bluefinger.com
Company Reg No: 4209395 Registered Office: 2 Temple Back East, Temple
Quay, BRISTOL. BS1 6EG.
*** This E-mail contains confidential information for the addressee
only. If you are not the intended recipient, please notify us
immediately. You should not use, disclose, distribute or copy this
communication if received in error. No binding contract will result from
this e-mail until such time as a written document is signed on behalf of
the company. BlueFinger Limited cannot accept responsibility for the
completeness or accuracy of this message as it has been transmitted over
public networks.***
[ reply ]