nanog mailing list archives

Re: Facebook insecure by design


From: Michael Thomas <mike () mtcc com>
Date: Sun, 02 Oct 2011 08:38:36 -0700

William Allen Simpson wrote:
In accord with the recent thread, "facebook spying on us?"

We should also worry about other spying on us.  Without
some sort of rudimentary security, all that personally
identifiable information is exposed on our ISP networks,
over WiFi, etc.

Facebook claims to be able to run over TLS connections.
Not so much (see attached picture).

This wasn't an "app", this is the simple default content of a
page accessed after a Google search.


I'm not sure why lack of TLS is considered to be problem with Facebook.
The man in the middle is the other side of the connection, tls or otherwise.

Mike


Current thread: