Wednesday, 19 February 2014

Zenmate and other internet proxies

Dear Val,
Proxies are not all good news.
Internet Proxies insert themselves into the chain of trust between you and your bank and they will be able to read your data: see explanation below for how this is done.

There are two types of connection that are of interest when using a browser, HTTP and HTTPS, HTTP traffic is clear text and is used for most websites and HTTPS is encrypted which means the data between computers is NOT readable, so in a nutshell HTTP is like a postcard and anyone can read it and HTTPS is like a letter in an envelope with a red seal.

When you connect to your bank over the internet, an encrypted session is automatically created between your browser and the bank so your data isunreadable to anyone.  To know you have an encrypted session you will see the following in the URL bar; a closed padlock, https:// and the text will be grey or green.  Green text in the URL bar means the company has had to pass more checks but the encryption level is the same as a grey text site.
When you use a proxy service your data is redirected through the proxy and the encryption is now between your browser and the proxy service NOT your bank.  The proxy creates its own encrypted session with your bank so there is NO encryption on the proxy itself, so all your bank details are CLEAR TEXT whilst on the proxy.  This technique is called a man in the middle attack.


So the advice is:
If you want to watch telly - proxy on.
If you are on-line 
banking or other sensitive stuff - proxy off, unless you really trust the proxy company - and trust is what it's all about.
Neville
Val says  the little diagram would not work . Malc says we use proxies to watch the TV  on the computer which we then link to the TV. He always switches them off after use.
Me, I don't understand any of it.
Comments to taglines82@gmail.com