3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
1
vote
0answers
77 views

Can not access any site with Chrome but Chromium does access any site well at the same time

I'm in for trouble with Chrome on my Mac after I backed to my home. The problem is I can not access the site such https://www.google.com with error code "ERR_ACCESS_DENIED". Even It's not restricted ...
0
votes
1answer
39 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
89 views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
5
votes
2answers
5k views

“Cannot connect to the real Gmail.com”

Dunno what happened, but suddenly I cannot connect to Gmail from Chrome on this computer: Under "more" it says: What does this mean? gmail.com normally uses encryption (SSL) to protect ...
0
votes
1answer
66 views

can a hacked DNS make a fake certificate seem legitimate?

I'm doing some traveling right now, so I've been doing a lot of reading about secure browsing on unprotected public networks. My understanding is that if you're using HTTPS and your browser indicates ...
0
votes
1answer
57 views

Why are websites suddenly not secure?

Firefox updated today, without asking me. The update went well, and browsing works fine, with one exception- Websites are suddenly not providing any identity credentials. DeviantART, Lumosity, ...
1
vote
0answers
52 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
1answer
686 views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
2
votes
1answer
464 views

http Redirect to https Sometimes Leads to “this page contains other resources which are not secure”

In Chrome (though I may have seen similar behavior in other browsers), type in http://www.google.com. You will always be redirected to https://www.google.com. Usually when I do this, I get the good ...
0
votes
1answer
164 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
0
votes
2answers
61 views

Logging into google on company computer [duplicate]

I have just started my very first corporate job at a big company this week, and they issued me a personal laptop (not shared with anyone else). I've been told that they monitor the internet fairly ...
31
votes
2answers
2k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
2
votes
1answer
120 views

Is HTTPS connection hijacking possible?

This really bothers me a long time, because.. to encrypt / decrypt data you first need to send a encryption key / decryption key (on an unencrypted connection) to the computer you are comunicating ...
1
vote
2answers
103 views

Tracking information on HTTPS connection

My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
0
votes
2answers
375 views

Is there any proxy standard/software which encrypts the conneciton between client and proxy server?

I know of usual HTTP proxys and Socks proxys (Socks 4 / Socks 5 - where the main difference as far as I know is the support for DNS resolution via proxy). Both variants more or less "pass the data ...
8
votes
5answers
734 views

Downloading Microsoft Security Essentials via HTTPS

I want to download Microsoft Security Essentials on my brand new Windows 7 home PC. The official site presented to me is http://windows.microsoft.com/de-CH/windows/products/security-essentials, as I ...
6
votes
3answers
48k views

What is the modern day equivalent of Firesheep?

Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is ...
0
votes
1answer
237 views

Gmail loses browser encryption after a while

I'm using the latest version of Firefox on the latest version of OS X for reference. I've noticed that sometimes when I go back to my email tab and look in the location bar, Firefox says gmail is no ...
1
vote
3answers
164 views

HTTPS in public wireless network: is it ok

When I am using public WiFi to go to a secured site that uses HTTPS, is my data encrypted? Is it a lot more risky than when I am on a secured network ?
-1
votes
3answers
343 views

Why do some browsers ask for confirmation before following any HTTPS link?

I've seen many browsers, both mobile and desktop, show a warning dialog when I click on an HTTPS link. Just warning of the fact that this is an HTTPS link. For example, my Nokia E75 asks "Opening a ...
6
votes
2answers
197 views

Why might a browser sometimes ask for confirmation when going to an HTTPS page?

When I click on a link to an HTTPS link, the browser will sometimes ask for confirmation or channel me though a form before it will allow me to se the page. Why would it do this? (This question ...
3
votes
3answers
2k views

How difficult is it to crack HTTPS? [closed]

I'll be using a computer at a foreign country. Suppose the government is trying to figure out my password, would I be able to protect my password using HTTPS to log into GMail, or my company ...
0
votes
1answer
174 views

How to block access to https URLs by regex on OS X?

Is there any way in which I can, on OS X, effectively block against access (by browsers or potentially any process) to secure URLs by regex? E.g. deny access to: https://example.com/foo/bar/.* but ...
5
votes
1answer
536 views

What happened to the Https Lock in Firefox 4?

Previous versions of Firefox used to have a padlock icon in the address bar whenever you browsed to a HTTPS site. Since Firefox 4 it no longer seems to be there. What happened to it? Is there any way ...
7
votes
2answers
2k views

Why are email transfers between mail servers often not encrypted? Why aren't users warned about it?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
1
vote
2answers
568 views

How to lock down Win Vista Firewall for HTTPS only access?

When I'm on public WiFi (laptop), I want to configure my firewall through its advanced settings to allow only HTTPS web traffic. My first attempt was to block incoming and outgoing by default, then ...
1
vote
3answers
789 views

How to ensure HTTPS is used to send credentials?

As a user, how do I know my user name and password sent to a server is encrypted with HTTPS? Let me preempt the answer of "look for the little lock" or "look for https in the URL" with the following ...
0
votes
2answers
224 views

how to use open wi-fi without a VPN, but remaining secure?

Is there a way to use open wi-fi with your laptop, but WITHOUT using a VPN solution, in a secure fashion? (i.e. to avoid man in the middle, passwords in the clear etc) For example all that comes to ...
1
vote
1answer
2k views

Security warning in IE for non-secure content

I'm faced with strange behaviour in IE8. There is an HTTPS web page which contains an IFrame pointing to non-secure page. When I receive a security warning from IE, if I choose "Yes", I see ...
22
votes
8answers
13k views

Is there an HTTPS Everywhere add on for Chrome, MSIE or safari?

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?
7
votes
7answers
1k views

Am I secure from network monitoring software if HTTPS is used?

I will be logging into my bank account and my personal email accounts at work. Its not banned at work, but I just don't want them to save/log a copy of whatever I do with these services. Especially my ...
1
vote
2answers
234 views

Is the Royal Mail website secure? [closed]

In the UK our postal service drops cards through our mailbox when there is a fee to pay on a item of mail. On this card it gives us a URL to visit to pay the fee, after following the links you get to ...
1
vote
3answers
173 views

Wireless Hotspot Vulnerabilities on BBC Watchdog

I watched a program on the BBC last night that highlighted the risks of using any public wireless hotspot. http://www.guardian.co.uk/technology/2009/oct/29/wifi-watchdog-hotspot-security-vulnerable ...
0
votes
1answer
337 views

How safe is chatting in iGoogle?

How safe is chatting in iGoogle - Chat in office? I am chatting over HTTPS.
9
votes
1answer
5k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
0
votes
1answer
419 views

What are the solutions to Ha.ckers.org challenge?

I was looking around to test my HTTP knowledge, and I found the ha.ckers.org challenges here and here I spent lot of time trying to figure out how to find the captcha and how to change some cookies ...
1
vote
5answers
2k views

How do I get my browser to remember passwords for secure sites?

I feel that my personal computers -- in my house -- are pretty safe. If someone has physical access to them then I am either okay with that or calling 911 with bigger problem. So I wonder: How do I ...