hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : can ISP see what a user see visiting SSL sites?
Reply

Forum Jump

can ISP see what a user see visiting SSL sites?

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 02-21-2006, 03:24 PM
johnpaul johnpaul is offline
Newbie
 
Join Date: Jan 2006
Posts: 14

can ISP see what a user see visiting SSL sites?


i know that ISPs (internet service providers) can see which sites their users visited and they can click on the url and see what the user had seen .

if a site have SSL certificate, and the users use it to surf the site,
like httpS://mysite.com can the ISP see which site the user visted ?

or everything including domain name and contents of the site would be encrypted?

please somebody who himself is in the ISP industy reply me , it is important for me.



Sponsored Links
  #2  
Old 02-21-2006, 04:21 PM
PerfoHost PerfoHost is offline
Premium Member
 
Join Date: Apr 2004
Location: Canada, Montreal
Posts: 59
Man-in-the-middle attack is possible in case of selfsigned certificate. If your site use
_valid_ ssl certificete, and user do not accept untristed certificates (valid certificates automaticaly trusted) it is not possible to sniff such encripted session.

  #3  
Old 02-21-2006, 05:11 PM
tamasrepus tamasrepus is offline
Web Hosting Master
 
Join Date: Dec 2004
Location: New York City, NY, USA
Posts: 735
I don't think the OP was questioning the validity of SSL, just whether what SSL sites a user had been visiting could be snooped.

Yes, they could. A user's connecting to an SSL site has to connect to a certain IP running the SSL server; an ISP (at minimum, and if they wanted to) will have access to what IPs that machine had been connected.

__________________
Samat Jain | Rhombic Networks, LLC - Partner, CTO

Sponsored Links
  #4  
Old 02-21-2006, 05:29 PM
PerfoHost PerfoHost is offline
Premium Member
 
Join Date: Apr 2004
Location: Canada, Montreal
Posts: 59
It possible only if we had physical access to server. But in this case we siply can look into logs. :-)

  #5  
Old 02-21-2006, 09:16 PM
waxdoll waxdoll is offline
Junior Guru
 
Join Date: May 2004
Posts: 197
Ofcourse... the logs will show everything...

__________________
Waxdoll
Quite, Cool & Adjustable, But Dangerous
I Love Microsoft

  #6  
Old 02-22-2006, 01:59 AM
johnpaul johnpaul is offline
Newbie
 
Join Date: Jan 2006
Posts: 14
Quote:
Originally Posted by waxdoll
Ofcourse... the logs will show everything...
too bad , so what is SSL certificate for ?
by you didnt tell me, does it Encrypt the domain name ?


Last edited by johnpaul; 02-22-2006 at 02:03 AM.
  #7  
Old 02-22-2006, 07:08 AM
PerfoHost PerfoHost is offline
Premium Member
 
Join Date: Apr 2004
Location: Canada, Montreal
Posts: 59
Yes. Whole http request/respons sended encryptet.
1. Browser negotiate ssl encrypted connection with IP on server.
2. Then sen GET or POST request with domain name on headers.

Reply

Related posts from TheWhir.com
Title Type Date Posted
Conference Tips and Tricks from the Pros Blog 2013-10-16 10:18:48
The Host Group Launches Updated Line of SSL Certificate Options Web Hosting News 2013-06-24 10:14:16
Report: Netcraft Sees Valid SSL Certificates on Phishing Sites Web Hosting News 2012-08-23 20:00:40
Facebook Says Minor Outage Not Caused by Anonymous Hackers Web Hosting News 2012-06-01 15:25:42
Mexican Web Host Neubox Launches Site Builder CM4all Sites Web Hosting News 2012-05-30 16:19:51


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?