nanog mailing list archives
Re: Facebook insecure by design
From: Michael Thomas <mike () mtcc com>
Date: Sun, 02 Oct 2011 08:38:36 -0700
William Allen Simpson wrote:
In accord with the recent thread, "facebook spying on us?" We should also worry about other spying on us. Without some sort of rudimentary security, all that personally identifiable information is exposed on our ISP networks, over WiFi, etc. Facebook claims to be able to run over TLS connections. Not so much (see attached picture). This wasn't an "app", this is the simple default content of a page accessed after a Google search.
I'm not sure why lack of TLS is considered to be problem with Facebook. The man in the middle is the other side of the connection, tls or otherwise. Mike
Current thread:
- Re: Facebook insecure by design Michael Thomas (Oct 02)
- Re: Facebook insecure by design Jimmy Hess (Oct 02)
- Re: Facebook insecure by design William Allen Simpson (Oct 02)
- Re: Facebook insecure by design Michael Thomas (Oct 02)
- Re: Facebook insecure by design Patrick Sumby (Oct 03)
- Re: Facebook insecure by design Jason Leschnik (Oct 03)
- Re: Facebook insecure by design Michael Thomas (Oct 03)
- Re: Facebook insecure by design William Allen Simpson (Oct 02)
- Re: Facebook insecure by design Jimmy Hess (Oct 02)
- Re: Facebook insecure by design Jimmy Hess (Oct 02)
- Re: Facebook insecure by design Joel jaeggli (Oct 02)
- Re: Facebook insecure by design Joel jaeggli (Oct 02)