3 ms·
I have a palo alto networks firewall with URL filtering.I can observe destination URL's on https sites without performing SSL decryption. please see eff website
by fosco 10y ago
I have a palo alto networks firewall with URL filtering.I can observe destination URL's on https sites without performing SSL decryption. please see eff website showing certain information that can be observed by onlookers[0] when you are using Tor or HTTPS or both
https encrypts the contents... not things like source/destination often only a destination IP address is required to get URL categories for many Proxy/URL filtering technologies.
[0] https://www.eff.org/pages/tor-and-https https://www.eff.org/pages/tor-and-https
- enzanki_ars 10y agoIf you go to https://example.com/some/directory?param=something https://example.com/some/directory?param=something, the firewall will only see a request to https://example.com https://example.com. Everything else is encrypted. In this case, with SSL, a government agency not doing a MITM will only see https://www.niemanlab.org https://www.niemanlab.org, and http://www.niemanlab.org/2017/01/how-easy-is-it-to-securely-leak-information-to-some-of-americas-top-news-organizations-this-easy/ http://www.niemanlab.org/2017/01/how-easy-is-it-to-securely-... if they were doing a MITM.
- hueving 10y agoYou are confusing URLs with Domains. The only plaintext part of an SSL connection is the SNI, which is the domain.