The Information You Are Sending Can be Viewed by Third Party

[MrPerkasa]

Do you want to continue?

That's the message I get on every page whenever I open opelaus on my iPaq.

Can anyone tell me what it actually is?

Cheers guys.

Warning: This is an Old Thread This discussion is older than 120 days. information contained in it may no longer be current . Please think of the children before resurrecting this ancient thread!

[InsaneAsylum]

it's a setting in internet explorer on your ipaq. when the message pops up do you get a tick box that says "do not show me this type of message again". if so, tick it then click ok.

[MrPerkasa]

But I want it to warn me (I do a lot of internet banking on my iPaq)

I should've been clearer: My question was: What information am I sending when I open opelaus pages?

[InsaneAsylum]

when you post messages you will be doing http post operations.

the message is basically warning you that if you are entering stuff like your personal details, credit card numbers of other sensitive information, that it is being send via a non secure protocol and is suceptible to packet sniffing. doesn't necessarily mean that someone will get your details, although if they did manage to intercept the packets, the data would be readable (ie. not encrypted)

[MrPerkasa]

But I wasn't posting when that happens.

It happens everytime I open any page. Ah..... I see you now. Do opelaus pages request IP address or something like that?

[InsaneAsylum]

lol i'd say yes, but that's a guess. i'm not sure what these crafty admins are up to? *looks at paulyj and vectracious*

i hate those messages in internet explorer anyway, they're a bit like the paper clip in microsoft office... hey it looks like you're writing a letter

i just make sure i'm browsing https when i'm logged in to my bank site

[MrPerkasa]

Thanks,

I guess that's it. I am using older version of Windows Mobile, which does not filter phishing, so for the time being I have to live with that messages when browsing opelaus . I do always check if the site is https though, just a double security measurement.

[lithium]

actually i think your browser is sending information such as the thread ID and and post ID to Opelaus every time you view a thread. if you look at the url for this thread:

http://www.opelaus.com/forum/showthr...784#post355784

all the parts after the '?' are sent to Opelaus via a http GET request. so you are telling Opelaus 'show me thread number 355751'. most browsers don't complain about GET requests being sent over unencrypted http but i suppose IE is attempting (and failing!) to be helpful by telling you about it

with regards to storing IPs, any web server can choose to do that whenever you visit their website. the server doesn't need to explicitly query your computer to do that, and its also independent of whether you are using http or https

[Vectracious]

lol i'd say yes, but that's a guess. i'm not sure what these crafty admins are up to? *looks at paulyj and vectracious*

Yes, we can see your IP address.

No, we don't see anything else about you other than your OA account registration info.

[stevedee3]

actually i think your browser is sending information such as the thread ID and and post ID to Opelaus every time you view a thread. if you look at the url for this thread:

www.opelaus.com/forum/showthread.php?p=355784#post355784

all the parts after the '?' are sent to Opelaus via a http GET request. so you are telling Opelaus 'show me thread number 355751'. most browsers don't complain about GET requests being sent over unencrypted http but i suppose IE is attempting (and failing!) to be helpful by telling you about it

Actually, all the bits after the host name are being transmitted to the server in cleartext (unencrypted).

You're probably also sending a session cookie that identifies your OpelAus account.

As an example, here's what gets sent when I load the forum index page:

GET /forum/index.php HTTP/1.1
Host: www.opelaus.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-au,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: UTF-8,*
Referer: http://www.opelaus.com/forum/index.php
Cookie: bbuserid=79; bblastvisit=1209475195; bblastactivity=0; bbpassword=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx; bbsessionhash=yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy

If the connection was over https, then none of this would be visible to an eavesdropper.