Re: [tlug] Proxies on Port 443

["Stephen J. Turnbull" <stephen@example.com>]

>>>>> "Jim" == Jim  <jep200404@example.com> writes:

    Jim> Yikes! That sounds like a man in the middle attack.
    Jim> Proxies on port 443 sniffing all the passwords that ones
    Jim> though were encrypted sounds really scary.

Encryption without authentication is essentially worthless on the
Internet, by definition of internet.  A gateway by definition
intercepts packets, and it's trivial to store them.

    Jim> It makes me want to write an ssh tunnel on (DNS) UDP port 53,
    Jim> but that'd probably be proxied also.

If ssh itself is closed, DNS had better not be open!


-- 
School of Systems and Information Engineering http://turnbull.sk.tsukuba.ac.jp
University of Tsukuba                    Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
               Ask not how you can "do" free software business;
              ask what your business can "do for" free software.