BAD NEWS :( Government amendments reinforce Big Browser

[Ben Laurie]

Philip Rowlands wrote:
> 
> Jeremy Stein wrote:
> >
> > Are http requests encrypted during an SSL session, or is it only the actual
> > data that is encrypted?  If the former, would this mean that if an
> > anonymous web browsing proxy equipped with SSL was used, the only
> > information that could be gathered by interception would be that you were
> > connected to that particular proxy?
> 
> As far as I know, the whole thing is encrypted. All you'd see by
> watching the wire would be what I would call comms data; source address,
> destination address, time of communication, possibly size of
> communication.

Correct.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

Coming to ApacheCon Europe 2000? http://apachecon.com/