Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Steve Gibson's Fingerprint service detects SSL man in the middle


17 Apr 2013   #1

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 
Steve Gibson's Fingerprint service detects SSL man in the middle

Quote:
We have all heard over and over again that secure web pages are safe. They are encrypted using SSL and HTTPS such that the contents of the pages are confidential. But, just because data is encrypted, that doesn't mean that it can't be spied on.

Needless to say, malicious software, typically on a Windows computer, can see passwords before they get encrypted by the web browser. A newer approach - infecting the web browser itself - is far worse. The browser sees everything coming and going, making it the perfect spy. Read a few articles about man in the browser attacks and you may never do online banking again (here's one story and another).
Source

A Guy

My System SpecsSystem Spec
.

20 Apr 2013   #2

Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
 
 

Just went to Steve Gibsons site and verified my bank. Its a manual system but only takes a few seconds. You put in the address of the web site and it displays the SHA1 finger print of the certificate and then you compare that to what your browser shows. Read about it here and access the test.

https://www.grc.com/fingerprints.htm

Jim
My System SpecsSystem Spec
28 Apr 2013   #3

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Our Bank matches up.

Thanks for the post Bill.

Your right about the manual part Jim, it helps to have separate tabs open, and make sure you're using the log-in page of the site you want to check. Should be https:

I tried the regular site page and the fingerprint from Gibson generated a SHA1 #, but none showed on my FF security page because it lead with http: , I might be able to find it if I dig deep enough.


Bill, you'll have to give Gibson heck, he didn't leave instructions for Opera...


Bill I can't seem to find the SHA1 #'s page, I have 12.15, and have been all over these help pages.
Opera Help | Certificates

Would you know where to find them?
My System SpecsSystem Spec
.


28 Apr 2013   #4

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Left click to the left of the address bar (says page information on mouse over)> Click on details> Certificate tab> Click on a certificate name> Click on Fingerprint [SHA-1]



I had to do some sleuthing around when I found this article

A Guy
My System SpecsSystem Spec
28 Apr 2013   #5

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Thanks Bill, I have it now.
My System SpecsSystem Spec
Reply

 Steve Gibson's Fingerprint service detects SSL man in the middle




Thread Tools



Similar help and support threads for2: Steve Gibson's Fingerprint service detects SSL man in the middle
Thread Forum
Solved Window 7 detects too many monitors? Hardware & Devices
HIPS detects autorun.inf wants to 'run' System Security
after update my antivirus detects Windows Updates & Activation
HELP!! x64 bit OS detects only 3.25G ram out of 8G Hardware & Devices
Installed CCC 11.1, detects as 10.5 Graphic Cards
BSOD following ASIO drivers for Gibson RIP Hardware BSOD Help and Support
Adobe detects W7 as Windows NT Software

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:00 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33