p0cc

SSL was the latest standard until 1999, when TLS 1.0 was released.

Per RFC 2246 [0], "The differences between this protocol [TLS 1.0] and SSL 3.0 are not dramatic, but they are significant enough to preclude interoperability between TLS 1.0 and SSL 3.0"

SSL/TLS Versions 1995-present: https://en.wikipedia.org/wiki/Transport_Layer_Security#Histo...

[0]: https://datatracker.ietf.org/doc/html/rfc2246

            if cmd in ["CFIP", "DNS"]:
                print("Soon")
                continue

You can contact her here: https://www.feinstein.senate.gov/public/index.cfm/contact

---

Senate Press Release on this topic: https://www.judiciary.senate.gov/press/rep/releases/graham-b...

This is a disaster waiting to happen. If it spilled, it would disrupt the Suez Canal and jeopardize the livelihoods of 1.7 million people who depend on fish.

1. No SSL: User <--HTTP--> Cloudflare <--HTTP--> Origin Server

2. Flexible SSL: User <--HTTPS--> Cloudflare <--HTTP--> Origin Server

3. Full SSL: User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Self-signed cert ok, expired cert ok

4. Full SSL (strict): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Origin server must use an SSL certificate that Cloudflare provides [1]

5. Strict (SSL-Only Origin Pull): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; same as Full SSL (strict), but you pay need to pay Cloudflare more money

---

3 and above will fix this issue as they encrypt from Cloudflare to the Origin Server.

This is the traffic flow from the link:

User -> Cloudflare -> Airtel -> GitHub Pages

Where the connection with flexible SSL is Cloudflare <--HTTP--> GitHub Pages.

Upgrading to Full SSL (or higher) and using HTTPS on GitHub [2] should fix.

---

Alternatively, deploy your static website with Cloudflare Pages [3], which has feature parity with Github Pages.

The flow would then be: User <--HTTPS--> Cloudflare Pages

[0]: https://developers.cloudflare.com/ssl/origin-configuration/s...

[1]: https://developers.cloudflare.com/ssl/origin-configuration/o...

[2]: https://docs.github.com/en/pages/getting-started-with-github...

[3]: https://pages.cloudflare.com/

EDIT: The replies by kentonv, x1110dc, and r1ch all have valid points.

Relevant XKCD: https://xkcd.com/723/

  Location: San Francisco
  Remote: Yes
  Willing to relocate: Anywhere
  Technologies: Python, Go, Bash, Typescript, Javascript, HTML, CSS, Deep knowledge of TCP/IP stack, Wireshark, Scapy
  Résumé/CV: https://swit.sh/resume
  Email: rj АT swit.sh
  Github: github.com/pocc
  Stack Overflow: https://stackoverflow.com/users/1596750
  
  I have 4 years of experience as as network engineer and want to focus more on programming/automation. 
  I have several websites and chrome/firefox extensions. 
  Ideal role involves using go or typescript.

I mean it is, but most people wouldn't read literature that way.

Likewise, the protocols do different things at different layers. Some are nested like Ethernet/IP/TCP/HTTP. TCP ensures delivery while UDP does not.

If you want to search for protocols in packet captures, I created tshark.dev/search/pcaptable/ for this exact purpose. Search 1000+ protocols from 6000+ packet captures.

---

Per capinfos, the author merged a bunch of pcap files with `mergecap` from Wireshark's sample captures. It has 38 interfaces, which is the highest I've ever seen!

  $ tshark -r ultimate.pcapng -T fields -e frame.protocols | sed -e 's/:/\n/g' | sort | uniq | wc -l
  69

> There is a very complicated "NG" pcap format, but nobody uses it.

This is the reason that pcapng was created - to formalize the structure of this metadata. pcapng "Pcap Next Generation" (2006) is an update to the pcap format (which originated with libpcap/tcpdump in the 90s). It's used in the networking industry as it's the default output file of wireshark, tshark, and tcpdump to capture traffic. If you use these tools, chances are that you have pcapng files.

The biggest reason to use it over pcap (in networking) is that you can save packets from multiple network interfaces. If you have a wireless access point and want to capture both ethernet and 802.11 traffic in the same capture, pcapng would be necessary.

[0]: https://medium.com/@paonecreative_87456/scrolljacking-the-us...

[0]: https://en.wikipedia.org/wiki/Insider_trading

I'm thinking of diagramming tools that are based on text, like Graphviz, Mermaid, PlantUML, and Webgraphviz.

  * Firefox: https://addons.mozilla.org/en-US/firefox/addon/disable-slack-wysiwyg/
  * Chrome: https://chrome.google.com/webstore/detail/jenojkbpialbgpbgokiakifhpmoponjn

Let me know if you have any questions.

  [1]: https://github.com/kfahy/slack-disable-wysiwyg-bookmarklet
  [2]: https://news.ycombinator.com/item?id=21589647
  [3]: https://news.ycombinator.com/item?id=21591950