The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Confirm a connection is using HTTPS?

    Discussion in 'Networking and Wireless' started by Greg, Jul 15, 2008.

  1. Greg

    Greg Notebook Nobel Laureate

    Reputations:
    7,857
    Messages:
    16,212
    Likes Received:
    58
    Trophy Points:
    466
    So I'm working on some secure website stuff, and I'm wondering...can I validate that a URL is indeed transmitting over HTTPS and not HTTP?

    I was thinking to use Wireshark and sniff the packets out, haven't been able to try that yet.

    Thought it was worth asking.

    Note: I do not have administrative control over the server I am using, and cannot change anything in it (PHP, MySQL, Apache, nothing). It claimes to support HTTPS and already has the encryption certifications supposedly and I'd like to verify.

    Another Note: This server also runs my Purdue webpages, which you can get a sample of here. If that is HTTPS verified, than my other system I'm working on is also HTTPS verified.
     
    Greg, Jul 15, 2008
    #1
  2. Shyster1

    Shyster1 Notebook Nobel Laureate

    Reputations:
    6,926
    Messages:
    8,178
    Likes Received:
    0
    Trophy Points:
    205
    When I go to your sample page and check for a certificate under IE7, I get a valid certificate path authenticated by thawte and web.ics.purdue.edu

    I exported the certificate and attached it as a zip, just in case you want to take a look at what came across.
    View attachment Greg_Cert.cer.zip
     
    Shyster1, Jul 18, 2008
    #2
  3. Greg

    Greg Notebook Nobel Laureate

    Reputations:
    7,857
    Messages:
    16,212
    Likes Received:
    58
    Trophy Points:
    466
    It looks like that is right...I'm somewhat familiar with the security on campus.

    I've got FF2 and FF3 also stating it is okay under HTTPS. I'm going to ask the IT department if anything else is needed from me, but it does look like it is working.

    Thanks!
     
    Greg, Jul 20, 2008
    #3
  4. Shyster1

    Shyster1 Notebook Nobel Laureate

    Reputations:
    6,926
    Messages:
    8,178
    Likes Received:
    0
    Trophy Points:
    205
    Sure, just let me know if you want another (or a better) copy of the exported certificate.
     
    Shyster1, Jul 20, 2008
    #4