It's self-signed, though, because I cannot afford to have an authority sign the certificate. This means that it's encrypted, but not "fully secure".

All browsers will give you a warning because of this, but Firefox 3 takes this to an extreme and refuses to let you connect unless you make an exception. Pretty misleading and dumb, I would say…

https://www.anontalk.com/

• Spread
• Media
• 66 visits

Awesome. This is REALLY important for us Swedes since the FRA-law was passed. :/ Thanks ♥

• Cite

Great, Sysop. Thanks!

• Cite

For those who use FF3, just add it to the trusted site thingy that comes up when you try to enter the site.

• Cite

@30,417
You know the SSL/TLS spec was never designed for that kinda shit - it was for protecting passwords and accounts. The police can still put the data together by applying a man-in-the-middle attack on the diffie-helmann the SSL uses. They can even do it afterwards since they most likely have the packet logs off of your ISP:s routers - in Finland that gathering these logs is mandatory, but I don't know about Sweden. Even if the police are as stupid as the people writing the legistlation, they can still prove that you visited this site. The IP, port and timestamp are all in plaintext in the header. Posting on the site is as easy to gather as measuring the HTTP requests your browser sends out.

If you really wanna get by the system, do as the spamlords have. Get yourself a shellserver from some eastern European country and ssh-tunnel it through there… I also hear the UK takes their motherfucking time in handing over evidence to any other country. Or you can just use Tor or some other system.

Even so, I wouldn't be too worried about the buttfucking cops. Their method of investigation is still based on complaints received and their resources are very limited.

• Cite

@30,481

Man-in-the-middle-attacks are easy to notice using SSL. I'm quite certain the browser will warn you. Not that people care about those warnings though <.< And it doesn't matter if they can see that you've visited the page, that's not as you have the right to read whatever the fuck you want on the internet.

• Cite

This is great news! I am glad you have implemented this feature. I have one question though. With ssl, is the url I visit encrypted as well? For instance if my isp sniffed the packets would they see that I went to this thread https://www.anontalk.com/new_reply/6562, or would they only be able to see the ip address of this server?

• Cite

@30,551

> With ssl, is the url I visit encrypted as well?

Yep.

• Cite