Preventing attacks over https

chrisguk · 08-08-2019, 12:17 PM

We have a network behind a firewall and web proxy. Access to the internet is achieved from a user workstation through the proxy and firewall.

Is there a way to prevent anyone from hooking onto your http(s) requests outside the network and planting some code or keylogger on your workstation?

teckk · 08-08-2019, 01:55 PM

That's what https is for. To stop any man in the middle attacks. http is subject to that.
https://en.wikipedia.org/wiki/Https

Can you be 100% safe, no. Keep the ports on your internet device closed. Run a firewall. Read your logs for suspicious entries. Keep your software updated. Don't bridge devices to the internet like I have seen 100's of home owners talking about on AT&T's forums.

Proxy's can be a problem, depends on who runs them. If you have a https connection to another machine, then they can read the original packet.