BAD NEWS :( Government amendments reinforce Big Browser

[Owen Blacker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The whole thing is encrypted -- otherwise, you'd be able to read the
querystring (from a form submission by GET as opposed to POST) in the
clear, which would kinda defeat the object...   *GRIN*

- -----Original Message-----
From: Philip Rowlands [mailto:phr@doc.ic.ac.uk]
Sent: Wednesday, June 07, 2000 9:38 PM
To: ukcrypto@maillist.ox.ac.uk
Subject: Re: BAD NEWS :( Government amendments reinforce Big Browser


Jeremy Stein wrote:
> 
> Are http requests encrypted during an SSL session, or is it only the
actual
> data that is encrypted?  If the former, would this mean that if an
> anonymous web browsing proxy equipped with SSL was used, the only
> information that could be gathered by interception would be that you
were
> connected to that particular proxy?

As far as I know, the whole thing is encrypted. All you'd see by
watching the wire would be what I would call comms data; source
address,
destination address, time of communication, possibly size of
communication.

I can't accept that once the end-to-end connection is made, that what
is
said on that channel is "communications data". It is content, pure and
simple - if you need further persuading, consider CGI GET requests,
which are chock full of content.


Phil


_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered

through the MessageLabs Virus Control Centre. For further information
visit
http://www.uk.uu.net/products/security/virus/

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2

iQA/AwUBOT9aNM024CF+PI6rEQIhYACgzv1BTthk5Myl65Odmey2DuxWXbAAnjHM
+IVusmKJFXz489/gqhmmGycy
=XQk/
-----END PGP SIGNATURE-----

_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered 
through the MessageLabs Virus Control Centre. For further information visit
http://www.uk.uu.net/products/security/virus/