SSL question

SSL question

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
SSL question Jim Watt 05-05-2006
  |--> Re: SSL question Sebastian Gotts...05-05-2006
Posted by Jim Watt on May 5, 2006, 6:41 am
If you were  Registered and logged in, you could reply and use other advanced thread options
If I have a secure server and open a frame on another non secure
webserver is the data to the browser from the frame encrypted?
--
Jim Watt
http://www.gibnet.com

Posted by TwistyCreek on May 5, 2006, 9:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Jim Watt wrote:

> If I have a secure server and open a frame on another non secure webserver
> is the data to the browser from the frame encrypted?

No.

Now ask the question properly and you may discover why it's still OK to do
things like this in most cases.


Posted by Sebastian Gottschalk on May 5, 2006, 1:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
TwistyCreek wrote:
> Jim Watt wrote:
>
>> If I have a secure server and open a frame on another non secure webserver
>> is the data to the browser from the frame encrypted?
>
> No.
>
> Now ask the question properly and you may discover why it's still OK to do
> things like this in most cases.

Beside that it will make your address bar change from yellow to red,
orange or white, a broken SSL icon and a warning about mixed content
popping up, what exactly is the purpose of such a stupid thing except
giving a wonderful opportunity for phishing?

Posted by TwistyCreek on May 5, 2006, 3:53 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sebastian Gottschalk wrote:

> TwistyCreek wrote:
>> Jim Watt wrote:
>>
>>> If I have a secure server and open a frame on another non secure
>>> webserver is the data to the browser from the frame encrypted?
>>
>> No.
>>
>> Now ask the question properly and you may discover why it's still OK to
>> do things like this in most cases.
>
> Beside that it will make your address bar change from yellow to red,
> orange or white, a broken SSL icon and a warning about mixed content

How descriptively myopic of you to base a reply on pretty color changes
and dummy graphics, and miss the point entirely. <sigh>

> popping up, what exactly is the purpose of such a stupid thing except
> giving a wonderful opportunity for phishing?

Why would you assume that any nefarious motives exist? The question was
regarding end-to-end encryption and distributed content. And more
importantly perfect forward security, which SSL never has and never will
provide.

Now go back and think real slowly about what was being asked, the answer
given, and see if you can't manage to stumble across the correct page
before you reply again.

Don't worry, nobody will be holding their breath.




Posted by Jim Watt on May 5, 2006, 4:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:

I seem to have missed the reply from Sebastian Grottytalk
however, haven't missed much

>what exactly is the purpose of such a stupid thing except
>giving a wonderful opportunity for phishing?

The purpose of 'such a thing' is devising a mechanism to read
my webmail whilst using other peoples computers and networks.

Answers from those with a clue on how are welcomed.
--
Jim Watt
http://www.gibnet.com

Similar ThreadsPosted
BHO Question September 22, 2005, 8:11 am
VPN question February 19, 2006, 8:49 am
Wi-fi question June 1, 2006, 4:51 am
AVG question July 26, 2006, 7:08 am
Router question June 23, 2005, 3:41 am
Backup question June 28, 2005, 8:46 am
netstat -a question July 19, 2005, 4:39 pm
BearShare question August 12, 2005, 8:15 pm
Linux Question September 10, 2005, 12:50 am
Beginner's Question September 21, 2005, 12:47 am

The site map in XML format XML site map

Contact Us | Privacy Policy