WebApp Sec mailing list archives
Re: Security tool for monitoring HTTPS traffic?
From: Imre Kertesz <ikertesz () fastq com>
Date: Thu, 26 Feb 2004 14:32:59 -0700
This kind of defeats the purpose of SSL, doesnt it? Its like UPS opening up boxes at the transfer station to check out what's inside and repackaging. Interrupting SSL for any reason increases the risk of data compromise significantly, not to mention the privacy issues. For this to happen legally, the organization using this mechanism has got to have a very clearly worded policy about intent.
-I John Floyd wrote:
There are Application Layer firewalls which can inspect HTTPS traffic to assure that the communications coming in are not maliscious attacks via the web browser. These types of solutions will decrypt the traffic, inspect it, and then either re-encrypt or not, and send back to your webserver. http://www.infoworld.com/article/04/02/06/06FEsecureapp_1.htmlCheers John
-· · ···- · ·-· ·--· · - ·- -··· ··- ·-· -· ·· -· --· -·· --- --· "If you sit quietly at the edge of a river, eventuallyyou will see the bodies of your enemies float by" -A maxim of patience, author unknown
Imre Kertesz PGP ID: 0xA5DD6F44
Current thread:
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? Thomas Chiverton (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? lists AT dawes DOT za DOT net (Feb 26)
- <Possible follow-ups>
- RE: Security tool for monitoring HTTPS traffic? Altheide, Cory B. (IARC) (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? dd (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Glyn (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Satish Chandra Prasad (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Floyd (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? lists AT dawes DOT za DOT net (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Gary Flynn (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? najeeb . hatami (Feb 28)
- RE: Security tool for monitoring HTTPS traffic? Amichai Shulman (Mar 07)
- RE: Security tool for monitoring HTTPS traffic? Yoram Zahavi (Mar 10)
- Re: Security tool for monitoring HTTPS traffic? Romain Vergniol (Mar 10)
- RE: Security tool for monitoring HTTPS traffic? David Wong (Mar 10)