Re: basic ssl proxy question

From: Bjorn Randell (Bjorn_at_AlphaMale.me.uk)
Date: 06/23/03 

Date: Mon, 23 Jun 2003 01:42:27 +0100

"Fred Holm" <invalidaddress@hotmail.com.invalid> wrote in message
news:funJa.38$Qn6.34155@news.uswest.net...
> The conclusion would be:
> using an ssl proxy for a file sharing program, or for more "anonymity"
> in a chat application (like icq) is in vain; it offers not more security
> than a normal (non-ssl) proxy, true?

When it comes to using an SSL proxy for file sharing, it provides no extra
security than a non-SSL proxy, so true.

The same of course would be true for using ICQ in the same scenario, however
you then have the problem of having a rouge proxy owner who is running a
traffic sniffer for passwords! Is it worth the risk? That's a question
only you can answer :) 

-- 
Regards,
Bjorn Randell
Bjorn@AlphaMale.me.uk or ICQ #137732

Relevant Pages

  • CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability
    ... Core Security Technologies - CoreLabs Advisory ... AOL ICQ Pro 2003b heap overflow vulnerability ... A vulnerability in AOL's ICQ Pro 2003b instant messenger client could ...
    (Bugtraq)
  • [VulnWatch] CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability
    ... Core Security Technologies - CoreLabs Advisory ... AOL ICQ Pro 2003b heap overflow vulnerability ... A vulnerability in AOL's ICQ Pro 2003b instant messenger client could ...
    (VulnWatch)
  • Re: get ip
    ... |> 1) You didn't read my posts because I never mentioned security. ... | scans all-be-it if the access is through a proxy then there is no ... it goes to the local intranet server for that location. ... for future verification. ...
    (microsoft.public.scripting.jscript)
  • Re: Thousands of 537 Events in Security Log
    ... I managed to get the Messaging Security Agent to install by not installing ... I have configured proxy settings for both Update and Tracking and Web ... An error occurred during logon ...
    (microsoft.public.windows.server.sbs)
  • Re: Comodo blocking port forwarding
    ... on port 80 via a proxy, and the proxy does both DNS forwarding and HTTP proxying. ... Would you persuade people not to use AV? ... That is, if they really decide to use a virus scanner, I'd persuade them to not rely on it as a security measure, since most of them do. ... And now a wrong analogy between the analogue and the digital world, as well as a wrong analogy between biological diseases and computer security problems. ...
    (comp.security.firewalls)