Thepiratebay.se SSL certificate expired on 2/2/13 3:52 AM • Hacker News Board

duaneb wrote: post #8

kevin_rubyhouse wrote: post #5

What does this actually mean? To me, the obvious part is that people in coffee shops could be targeted. Is the most dangerous part about it to do with ISPs? They already could know what pages you visit TPB anyway, couldn't they? In Fiddler today all I seemed to see were handshakes to a secure site I host, but I couldn't see what pages or assets were requested. Do ISPs have the same problem?

Unless ISPs can magically decrypt HTTP requests, all they can see are sending & receiving IP and port. Without SSL, ISPs can view everything (unless tunneling or something similar to add encryption to an unencrypted protocol).

I think you meant `Unless ISPs can magically decrypt HTTPS requests`.

Re: Thepiratebay.se SSL certificate expired on 2/2/13 3:52 AM

#17

Post by TazeTSchnitzel » Sat, Feb 02, 2013, 12:29 PM UTC

popopje wrote: post #14

unrelated, but how utterly ridiculous that thepiratebay.se is blocked for me (UK, Be broadband), when nothing else is, whatever the content.

Actually, any child porn sites that the Internet Watch Foundation notices will be blocked too.

Re: Thepiratebay.se SSL certificate expired on 2/2/13 3:52 AM

#18

Post by alexmunroe » Sat, Feb 02, 2013, 12:52 PM UTC

TazeTSchnitzel wrote: post #17

popopje wrote: post #14

unrelated, but how utterly ridiculous that thepiratebay.se is blocked for me (UK, Be broadband), when nothing else is, whatever the content.

Actually, any child porn sites that the Internet Watch Foundation notices will be blocked too.

The difference between the anti-piracy and illegal porn blocks are that the porn blocks are transparant whilst the anti-piracy blocks are a clear notification page. I'm not sure if that was due to a requirement in the judgement or something else.

Re: Thepiratebay.se SSL certificate expired on 2/2/13 3:52 AM

#19

Post by TazeTSchnitzel » Sat, Feb 02, 2013, 1:14 PM UTC

alexmunroe wrote: post #18

TazeTSchnitzel wrote: post #17

Earlier quoted context omitted.

Actually, any child porn sites that the Internet Watch Foundation notices will be blocked too.

The difference between the anti-piracy and illegal porn blocks are that the porn blocks are transparant whilst the anti-piracy blocks are a clear notification page. I'm not sure if that was due to a requirement in the judgement or something else.

I just get a page that never loads for piratebay.se. Far from a clear notification. Then again, I don't use my ISP's DNS.

Re: Thepiratebay.se SSL certificate expired on 2/2/13 3:52 AM

#20

Post by ghjm » Sat, Feb 02, 2013, 1:20 PM UTC

People do understand that the certificate expiring does not affect security or encryption in any way, right? All it means is that some registrar wants to be paid now?