true or false or crap

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Dec 16, 2008 12:56 am

dont know if this is the right place to put this but if not im shore the mods will do some thing about it

Is this good info or crap??

Should it be pasted on or deleted??

Did you know this ??...
FIRST, MANY PEOPLE ARE UNAWARE OF
**The main difference between http:// and https:// is It's all about
keeping you secure** HTTP stands for HyperText Transport Protocol,

which is just a fancy way of saying it's a protocol (a language, in a
manner of speaking) for information to be passed back and forth between
web servers and clients. The important thing is the letter S which makes
the difference between HTTP and HTTPS.

The S (big surprise) stands for "Secure". If you visit a website or
webpage, and look at the address in the web browser, it will likely
begin with the following: http://.

This means that the website is talking to your browser using the regular
'unsecure' language. In other words, it is possible for someone to
"eavesdrop" on your computer's conversation with the website. If you
fill out a form on the website, someone might see the information you
send to that site.

This is why you never ever enter your credit card number in an http
website! But if the web address begins with https://, that basically
means your computer is talking to the website in a secure code that no
one can eavesdrop on.

You understand why this is so important, right?

If a website ever asks you to enter your credit card information, you
should automatically look to see if the web address begins with
https://. If it doesn't, there's no way you're going to enter sensitive
information like a credit card number.

PASS IT ON (You may save someone a lot of grief).

Baiting Guru Joined: 03 Mar 2006 Posts: 7103 Location: Yes

Yes, this is true (perhaps not the exact wording of the above, but essentially true).

You'll get a little padlock icon in the status bar at truly secure sites.

Even the CIA uses it: https://www.cia.gov/

Posted: Tue Dec 16, 2008 1:29 am

so it is better to send it off to friends than to delete it ??

Posted: Tue Dec 16, 2008 1:30 am

^ @ Skyhook: Ack. However: an https:/ address does not 100% guarantee it's a legit site, anyone can buy SSL certificates to set up a secure login. 99% of the time lads wouldn't bother though ..

ETA: this is useful information. Never give out credit card/ bank info if there's no https:/ showing in the title bar. No harm in spreading that.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

What Dutch said, seeing https doesn't guarantee anything, a lot of hosters now sell the SSL certificates along with hosting so that you can get a little padlock on your secure pages.

Posted: Tue Dec 16, 2008 3:04 am

The "missing S" is, however something that every site killer looks for. It's just another red flag if someone is asking for personal information and they don't even have the SSL certificate. Legitimate business' don't do that. (well, it's rare. Wink

check the legitimate TNT to see what I mean.)

Chuck Norris Joined: 11 Jun 2007 Posts: 1369

An example of sensitive information being requested on an insecure page can be seen here, on a lovely escrow site (still live) that the host seems to think is okay (by their continued non-action vs. the site):

http://members.419eater.com/~akai_ryu/fakesites/register_eac.htm

Check out all of the CC information they are requesting....all being done on an insecure page.

However as others said, having a fraud site as https:// while although unusual is not unheard of.

Posted: Wed Dec 17, 2008 12:16 pm

Or you can get a "Word-Scrambler" or "Letter-Scrambler" It scrambles all letters, So its fairly good security against Keyloggers.

Someone made a firefox addon that scrambles all your keys.. Handy If your infected etc.