How to leak to the press

Re:How to leak to the press by fosco on Friday January 27, 2017 @01:38PM (#13501591)

I have a palo alto networks firewall with URL filtering.I can observe destination URL's on https sites without performing SSL decryption. please see eff website showing certain information that can be observed by onlookers[0] when you are using Tor or HTTPS or both

https encrypts the contents... not things like source/destination often only a destination IP address is required to get URL categories for many Proxy/URL filtering technologies.

[0] https://www.eff.org/pages/tor-and-https

[ Parent | on HN ]

Re:How to leak to the press by enzanki_ars on Friday January 27, 2017 @01:43PM (#13501627)

If you go to https://example.com/some/directory?param=something, the firewall will only see a request to https://example.com. Everything else is encrypted. In this case, with SSL, a government agency not doing a MITM will only see https://www.niemanlab.org, and http://www.niemanlab.org/2017/01/how-easy-is-it-to-securely-... if they were doing a MITM.

[ Parent | on HN ]

Re:How to leak to the press by hueving on Friday January 27, 2017 @02:00PM (#13501744)

You are confusing URLs with Domains. The only plaintext part of an SSL connection is the SNI, which is the domain.

[ Parent | on HN ]