New answers tagged

0

What your employer is doing is common, and using a self-signed certificate for this is actually the only way, as no CA will issue a cert to an organisation that you can then use to sign other certs (if you run your own CA - e.g. AD CA services- you could have a cert issued for this, but it would still derive from the organization's root cert which will be ...


0

I think you are dealing with a cosmetic issue. GET https://www.youtube.com/ is most likely just what is logged to indicate that the fetching is done with GET, and the target is https://www.youtube.com. There is no standardised way for a proxy to support GET https:// URIs, it was mooted a couple years back at the IETF HTTP WG but discarded for various ...


0

error 444 is an http error. If your nginx is reverse proxying an https site, then there's no http until the TLS layer has been set up. So your server will be replying to the client helo packet with the server helo containing the certificate. You'd need to block at the IP level to prevent this.


0

HTTPS via a proxy uses a command called "CONNECT". This is called tunneling, and uses an HTTP request message using the CONNECT verb to set up a relay between the client and the requested server:port. The proxy makes the connection, indicates the connection to the client (e.g. sends back 200 Connection OK) and then gets out of the way. From this point, ...


0

For observation you can use Wireshark traffic analyzer. They have OSX version. As for changing the answers from your machine - it's another story. This is rather complicated. You should consider that any https conversation is designed in such way that third party won't interfere: https://en.wikipedia.org/wiki/Transport_Layer_Security And considering that ...


0

Well, you can't do this automatically, there is no option in Firefox, like browser.urlbar.*, for this. So you either use one of the browser extensions mentioned in the other answers here, or as I'd suggest (avoiding usage of browser extensions you don't really need), just make sure that you bookmark https://superuser.com instead of http://superuser.com. ...


64

Another alternative is HTTPS Everywhere. It's available for Firefox, Chrome and Safari. Since it is developed from the collaboration between EFF and the TOR project, I tend to believe this plugin more. It's also open source and available under GPLv3 license.


15

Firefox addon "HTTPS by default" works: https://addons.mozilla.org/en-US/firefox/addon/https-by-default/?src=ss


1

Here is a list of debugging steps you can try, hopefully one of them will help you self solve the problem. Is the web site using a self signed certificate or is it issued by a trusted authority? Can you inspect the certificate when using chrome? (click padlock icon on the right and view certificate IIRC) --> is the Valid from and to correct? --> are all ...


0

I found a way: 1) Create a subdomain in my internet domain; 2) Generate a let's encrypt certificat for this subdomain (intranet.domain.com.pem and intranet.domain.com.key); 3) Set the webapp(apache) with this intranet.domain.com.pem and intranet.domain.com.key; 4) Set the intranet dns of intranet.domain.com to intranet webapp server; Then, now I have a ...


-1

I think its better to check css and static html blocks if you placed any images directly without using Magento getBaseUrl() or store_url="" structure. Or check your website for SSL verified on - https://www.whynopadlock.com/


1

The comment 'There are no HTTPS forward proxies' is not true. They are very common. Any company of decent size will incorporate explicit forward proxies for SSL so that they can decrypt the https traffic for monitoring, logging and filtering purposes - a common euphemism being 'Compliance Reporting'. Some background, which you may already know, for context: ...


0

Can I digitally sign a PDF with the key used for my SSL website? No, normally the X.509 certificate's "Key usage" field will not permit it. And digital signing software checks that field in the cert. Here is the "Key usage" field for an SSL website cert: Here is the "Key usage" field for a cert used to digitally sign a PDF document. Compare with the ...


2

Technically, you can sign anything with the private key of a public-private key pair. What forms of public-private key pairs a given software package will accept as a valid key for signing, and for verify a signature with, is a different matter. I don't know the details of what Acrobat Document Cloud requires out of a key for signing and verifying with. In ...


0

If you're in any way worried about security, use HTTPS for both. I doubt that you would ever be attacked that way, but we never know and the way you allow the script to run automatically is quite risky. Note that all systems that access that file become vulnerable should the server get compromised.


3

Let's Encrypt (which gethttpsforfree.com is based on) needs to validate that you 'own' the domain you are trying to generate a certificate for, either by setting a public DNS entry for the domain or by creating a particular file reachable via HTTP at that domain (see https://letsencrypt.org/how-it-works/). However, as this is about an intranet domain, it is ...


2

HTTPS (HTTP over TLS) provides security while data is moving between the user agent (your browser) and the web server. That's it. It doesn't protect data on the client or server. HTTPS also only works if done entirely correctly. Also, with HTTPS websites, can you see where are how long are people going to these websites? If you can sniff the network ...



Top 50 recent answers are included