3 ms·
Do your coworkers routinely sniff your network traffic? It sounds like an awfully rude thing to do.
by pluies 16y ago
Do your coworkers routinely sniff your network traffic?
It sounds like an awfully rude thing to do.
- IgorPartola 16y agoI don't think so, but why put them in a position where they'd be tempted? If I send out a link to the salary share pool on our internal chat, the assumption is that at least some people will go filling it out around that time. If someone gets the temptation to know exactly what's going on, they could start up a packet sniffer. OTOH, a StartSSL cert would prevent all of this from happening.
- rglullis 16y agoWould you be okay with the cert provided by webfaction (where the site is hosted?), for now? https://salaryshare.me https://salaryshare.me
- IgorPartola 16y agoI imagine that this will deter people from quickly starting up a packet sniffer when they share links to your site. However, how are you able to use webfaction's cert? Do they just give you their private key? Or is it just a cert that is not really signed by anyone and the common name is set to *.webfaction.com? In other words, this does not mean that you can spoof www.webfaction.com's signature, corret?
- skdljfasdkl 16y agoI think it's shared hosting.
- Joakal 16y agoFirefox throws an untrusted connection warning that this certificate belongs to another website.
- jtheory 16y agoIt's a stopgap measure (because you have to click through the cert exception, because the domain name on the cert doesn't match the URL), but it will still encrypt the data just fine. The warning will confuse some people (such as yourself); that's why the dev asked if it was okay.