[145244] in North American Network Operators' Group
Re: Facebook insecure by design
daemon@ATHENA.MIT.EDU (Michael Thomas)
Sun Oct 2 11:40:56 2011
Date: Sun, 02 Oct 2011 08:38:36 -0700
From: Michael Thomas <mike@mtcc.com>
To: William Allen Simpson <william.allen.simpson@gmail.com>
In-Reply-To: <4E85865F.60700@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
William Allen Simpson wrote:
> In accord with the recent thread, "facebook spying on us?"
>
> We should also worry about other spying on us. Without
> some sort of rudimentary security, all that personally
> identifiable information is exposed on our ISP networks,
> over WiFi, etc.
>
> Facebook claims to be able to run over TLS connections.
> Not so much (see attached picture).
>
> This wasn't an "app", this is the simple default content of a
> page accessed after a Google search.
>
I'm not sure why lack of TLS is considered to be problem with Facebook.
The man in the middle is the other side of the connection, tls or otherwise.
Mike