D
D
dollar2018-09-04 22:53:34
Domain Name System
dollar, 2018-09-04 22:53:34

Is it possible to intercept passwords over HTTPS?

Suppose I specified a third-party (left) DNS. He can replace the real ip with his own. Question - can passwords be intercepted if the site works via HTTPS?
A more general question - can the left host spoof the entire site when connected via HTTPS?

Answer the question

In order to leave comments, you need to log in

3 answer(s)
X
xmoonlight, 2018-09-04
@xmoonlight

In short: Possibly.
Encrypt your traffic with your protocol inside SSL.

C
CityCat4, 2018-09-05
@CityCat4

Maybe.
Not easy, requires some preliminary steps, but possible. If you intercept the session key, then the session can be decrypted. And then all the traffic inside the tunnel is visible.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question