All geek questions in one place

How secure is SSL actually?

The other day, I noticed that if I started IEInspector HttpAnalyser and captured the data after entering my bank account or amazon account, these messages display my username and password in the box. This is a bit of a concern. Does anyone know at what point SSL encryption occurs? I assume this means that any software installed on your computer could potentially access this post-data. Very scary.

+3
source share
6 answers

Thing is built into your browser! A browser is an object that encrypts text, so it will have copies of both encrypted and unencrypted text. The plugin you specified has access to everything IE does.

If you want a true idea of ​​what is going on, use wireshark . This will read the actual network traffic output by your browser.

+15
source

Secure Socket Layer - encrypts data through a socket (network / internet) NOT on your local machine.

+7
source

SSL " ". , ( SSL, , - http://twit.tv/sn223).

, . SSL . , keylogging...

+2

SSL .

, Thilo - IEInspector, , IE, . , , SSL .

, , , Wireshark . , , .

+2

SSL, uid/pwd . , SSL - . , - , TLS 1.0 (TLS IETF SSL)

- SSL? , , , / ciphersuites, 40- 56- RC4 DES, MD4 ..

SSL , , .

As a concluding remark. SSL is generally better than anything you could design :)

greetings michael

+1
source

SSL encryption will certainly happen before you get on the network. A sniffer packet cannot receive the contents of a request or response.

Does IEInspector go inside IE (as a plugin)? In this case, it can probably do some pretty nasty things (but you agreed to it when you installed it).

0
source

Source: https://habr.com/ru/post/1732327/

More articles:


All Articles