Skip to main content

All Questions

Tagged with
0 votes
1 answer
215 views

is https really secure about the first data packet transmitted?

is https really secure about the first data packet transmitted? I dont know much how it works, but i understand that the first packet transmitted is not encrypted otherwise how would my pc know how to ...
VeganEye's user avatar
0 votes
0 answers
1k views

Encrypted browser-proxy (Squid) connection

I'm trying to set up an encrypted communication between the browser and our proxy (squid) theoretically, it must work out of the box with modern browsers as mentioned in squid official doc : https://...
Wad's user avatar
  • 1
0 votes
0 answers
54 views

Save HTTPS response together with SSL signature

I'm building an app that should download file from a given url and store it locally, like a cache. Now, I would like to be able to prove that the content was indeed downloaded from this url, and not ...
lobanovadik's user avatar
1 vote
0 answers
1k views

Decrypting TLSv1.3 data using SSLKEYLOGFILE from native app

I am trying to decrypt TLSv1.3 packets using Wireshark. I have succeeded in doing so using this tutorial: https://blog.didierstevens.com/2020/12/28/decrypting-tls-streams-with-wireshark-part-2/ This ...
tomvis1984's user avatar
0 votes
1 answer
32 views

Secure Http Post [closed]

I am creating a software for PC that will periodically validate the license in the server (VPS) thought http post. Basically it will send a string to the server containing user id, license id, ...
Guybrush's user avatar
  • 151
0 votes
1 answer
60 views

HTTPS communication without requesting certificate

Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
Kaleem Ullah's user avatar
3 votes
1 answer
18k views

How to setup HTTPS on qbittorrent WebUI with letsencrypt/certbot?

I am running qbittorrent-nox on an Ubuntu server (16.04). I use a dynamic DNS address to access the WebUI. In the github page there is a tutorial to setup HTTPS, but only using self-signed certs. I ...
Frank's user avatar
  • 50
0 votes
1 answer
97 views

How can I use LetsEncrypt easily to encrypt all my websites on windows?

I have an server on Azure running a PHP application. It runs the XAMPP app and it all works great. However I have been trying to get all my sites served over https. I have tried lots of things and ...
Toby Allen's user avatar
  • 3,065
5 votes
3 answers
8k views

Confusion about HTTPS proxies

I know how HTTP proxies work, but I am unsure about HTTPS ones. More specifically, I am confused about the encryption part. So, the client connects to the proxy using HTTPS. That I understand. Now ...
Mark Read's user avatar
  • 493
1 vote
1 answer
1k views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
Carlin's user avatar
  • 11
5 votes
2 answers
985 views

Does HTTPS also prevent middle man from tracking my browsing history apart from which domains I visited?

I read this article which says github is being blocked in Russia because a single controversial page hosted on it can't be blocked because of HTTPS. So I'm trying to determine if that implies that ...
anuj_io's user avatar
  • 153
7 votes
3 answers
5k views

What is the correct cipher name for RC4 in Chrome?

I want to remove RC4 from Google Chrome and found the commandline option --cipher-suite-blacklist. However I wasn't able to figure out what the correct notation for RC4 is. Whatever I tried so far ...
qbi's user avatar
  • 661
0 votes
2 answers
948 views

Is there any proxy standard/software which encrypts the conneciton between client and proxy server?

I know of usual HTTP proxys and Socks proxys (Socks 4 / Socks 5 - where the main difference as far as I know is the support for DNS resolution via proxy). Both variants more or less "pass the data ...
Joe Hopfgartner's user avatar
5 votes
3 answers
2k views

Is it possible for my company to monitor my Gmail?

Since Gmail uses https, all the messages should be encrypted? Here we assume my company does not have keystroke logger or random snapshot software.
CuriousMind's user avatar
  • 1,981
2 votes
4 answers
5k views

Log and debug/decrypt a windows application's HTTPS traffic

I've got a proprietary windows-only application that uses HTTPS to speak with a (also proprietary, undocumented) web service. To ultimately be able to use the web service's functionality on my linux ...
cweiske's user avatar
  • 1,997

15 30 50 per page