NeverSSL • Hacker News Board

Re: NeverSSL

#41

Post by kuratkull » Sat, Nov 02, 2019, 10:25 PM UTC

ckaygusu wrote: post #10

http://icanhazip.com is also good for this.

Redirected me to https, I have not visited that site before (probably).

Re: NeverSSL

#42

Post by pmoriarty » Sat, Nov 02, 2019, 10:26 PM UTC

"This website is for when you try to open Facebook, Google, Amazon, etc on a wifi network, and nothing happens. Type "http://neverssl.com" into your browser's url bar, and you'll be able to log on."

I don't get it. How does browsing to http://neverssl.com help you to log in to other websites?

Re: NeverSSL

#43

Post by Rusky » Sat, Nov 02, 2019, 10:26 PM UTC

pmoriarty wrote: post #42

"This website is for when you try to open Facebook, Google, Amazon, etc on a wifi network, and nothing happens. Type " http://neverssl.com" into your browser's url bar, and you'll be able to log on." I don't get it. How does browsing to http://neverssl.com help you to log in to other websites?

It gets you to the network's captive portal.

Re: NeverSSL

#44

Post by ajb » Sat, Nov 02, 2019, 10:27 PM UTC

rjeli wrote: post #40

Everyone seems to understand this but me... how does connecting to a non-ssl website disable ssl on other sites?

It doesn't, it gets you into the wifi network's login portal, from which you can log in and then ssl will start working.

[Edited to add] The problem is that websites that require ssl prevent you from getting into the login portals.

I have http://detectportal.firefox.com bookmarked on my phone for this exact reason.

Re: NeverSSL

#45

Post by biggestdecision » Sat, Nov 02, 2019, 10:27 PM UTC

rjeli wrote: post #40

Everyone seems to understand this but me... how does connecting to a non-ssl website disable ssl on other sites?

Some wifi networks will display a login/payment page to you by mitm'ing your connection & replacing the page you tried to load. But of course this only works for HTTP pages.

Re: NeverSSL

#46

Post by krishicks » Sat, Nov 02, 2019, 10:28 PM UTC

pmoriarty wrote: post #42

"This website is for when you try to open Facebook, Google, Amazon, etc on a wifi network, and nothing happens. Type " http://neverssl.com" into your browser's url bar, and you'll be able to log on." I don't get it. How does browsing to http://neverssl.com help you to log in to other websites?

If the WiFi has a login portal, you might not get redirected to it when accessing an https site. If you go to this site, you’re more likely to get properly redirected.

Re: NeverSSL

#47

Post by FR10 » Sat, Nov 02, 2019, 10:28 PM UTC

rjeli wrote: post #40

Everyone seems to understand this but me... how does connecting to a non-ssl website disable ssl on other sites?

Some WIFI networks require a login like airports or hotels. When you use https sites it wont redirect to the proper “wifi login” page as it should. This site being http should redirect you to that “wifi login” page

Re: NeverSSL

#48

Post by natdempk » Sat, Nov 02, 2019, 10:28 PM UTC

pmoriarty wrote: post #42

"This website is for when you try to open Facebook, Google, Amazon, etc on a wifi network, and nothing happens. Type " http://neverssl.com" into your browser's url bar, and you'll be able to log on." I don't get it. How does browsing to http://neverssl.com help you to log in to other websites?

It lets you access the portal to connect to wifi by allowing the router to MITM the connection due to the lack of SSL and bypassing caching with the random subdomain. After successfully connecting through whatever custom router software you'll be able to log in to those other websites.

Re: NeverSSL

#49

Post by cipehr » Sat, Nov 02, 2019, 10:29 PM UTC

Here is another similar site i've been using for years: http://amionline.net/

Re: NeverSSL

#50

Post by NilsIRL » Sat, Nov 02, 2019, 10:32 PM UTC

Since everyone is posting alternatives, here is Firefox's way:

detectportal.firefox.com