Skip to main content
Information Security

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

9
  • 1
    I agree, there's no reason to leave anything overlooked. One thing I've wondered, and relates to your point on public information. Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable? For example, say the following are HTTPS URLs to two websites by one IP over 5 mins: "A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2"; would monitoring of packets reveal nothing, reveal only the IP had visited "A.com" and "B.com", reveal a complete list of all HTTPS URLs visited, only reveal IP's of "A.com" and "B.com", or something else? Commented Jun 6, 2011 at 0:15
  • 3
    @blunders: Comments aren't the best places to ask new questions. Have a look at the following link, or open a new question. security.stackexchange.com/questions/2914/… Commented Jun 6, 2011 at 10:36
  • 8
    A telephone number on a "brochure-ware site" might be completely public information. That doesn't mean being able to spoof a telephone number on that website isn't a security risk. Commented Sep 9, 2014 at 15:49
  • 3
    @JesperMortensen, You are confusing "doesn't need security" with "doesn't need privacy". Yes, the data is public, that doesn't mean that we can avoid HTTPS (the mitm can simply return a bogus misleading page). Commented Feb 16, 2015 at 9:55
  • 3
    @JesperMortensen, Ok I realized this third comment is a few months late, but this is important: HTTPS is not about security alone. It's about accuracy too. You stated that web doesn't need security, but does the web need accuracy? (Just imagine how much mayhem there would be when we visit a.com but get contents from b.com and vice-versa. You go to youtube.com expecting to see some videos but it redirects you to bing.com.) Commented Jan 26, 2016 at 21:52