So I'm working on some secure website stuff, and I'm wondering...can I validate that a URL is indeed transmitting over HTTPS and not HTTP?
I was thinking to use Wireshark and sniff the packets out, haven't been able to try that yet.
Thought it was worth asking.
Note: I do not have administrative control over the server I am using, and cannot change anything in it (PHP, MySQL, Apache, nothing). It claimes to support HTTPS and already has the encryption certifications supposedly and I'd like to verify.
Another Note: This server also runs my Purdue webpages, which you can get a sample of here. If that is HTTPS verified, than my other system I'm working on is also HTTPS verified.
-
-
When I go to your sample page and check for a certificate under IE7, I get a valid certificate path authenticated by thawte and web.ics.purdue.edu
I exported the certificate and attached it as a zip, just in case you want to take a look at what came across.
View attachment Greg_Cert.cer.zip -
It looks like that is right...I'm somewhat familiar with the security on campus.
I've got FF2 and FF3 also stating it is okay under HTTPS. I'm going to ask the IT department if anything else is needed from me, but it does look like it is working.
Thanks! -
Sure, just let me know if you want another (or a better) copy of the exported certificate.
Confirm a connection is using HTTPS?
Discussion in 'Networking and Wireless' started by Greg, Jul 15, 2008.