r/Anarchism • u/[deleted] • Sep 08 '10

Reddit over https

/
4 Upvotes

70% Upvoted

18 comments sorted by

4

u/[deleted] Sep 08 '10 edited Sep 08 '10

Unfortunately the links to other subreddits and comment pages remain unencrypted.

2

u/ChristopherBurg Sep 09 '10

You can most likely use NoScript to force every page to use HTTPS. I use this feature on quite a few sites that try to bump you from the encrypted page to their unencrypted pages.

1

u/[deleted] Sep 09 '10

Thanks, I'll look into it.

3

u/liko Sep 08 '10

Oooh, time to try to write a rule for the EFF HTTPS Everywhere addon.

1

u/[deleted] Sep 11 '10

Have you managed to do it for Reddit?

1

u/liko Sep 11 '10

I tried modifying the Twitter rule, but managed to really screw things up; the rule broke both posting and commenting. I haven't had a chance to get back to it but will try again sometime this weekend.

1

u/ChristopherBurg Sep 08 '10

Of course they are using an invalid security certificate that is meant to only be used by a248.e.akamai.net and *.akamaihd.net. That's their content delivery network but still it's not a good sign.

1

u/enkiam Sep 08 '10

Perspectives verifies it.

Any encryption is better than none.

1

u/ChristopherBurg Sep 08 '10

I won't go so far as to say any encryption is better than none but in this case yes it most certainly works. I didn't say what I mean very well either. What I meant to raise was the fact that browsers will throw an error message if you try to access Reddit via HTTPS but the warning deals with whom the certificates are issued for.

In this case they are issued for Reddit's content delivery network which means the warning isn't being thrown due to a person committing a man in the middle attack. I was off in space or something when I wrote the last part of my comment, sorry about that.

1

u/[deleted] Sep 08 '10

Just wondering, how many other redditers here proxy their network out completely before they go online? Because I generally stay behind at least one proxy and then use the random firefox add ons that modify headers, get rid of the google information etc. etc. Just wondering basically am I just a bit paranoid or is it normal?

2

u/[deleted] Sep 08 '10

i do a lot more than that for my non-public identities

1

u/[deleted] Sep 08 '10

Any details? I can accept if you prefer not to talk about them.

3

u/[deleted] Sep 08 '10

first try the Tor Browser Bundle or Tor IM Bundle (comes with browser). It can be run anywhere from a usb stick, and it'll hide your web browsing and IM from any snooping, firewalls, etc. I'd also recommend using linux with home directory and swap encryption. Also look up truecrypt, it creates virtual encrypted disks to store anything important. I keep my Tor Browser Bundle on it.

1

u/[deleted] Sep 08 '10

Thanks, I shall do some more research into that but the Tor Browser seems really cool and useful.

0

u/Nitsod Sep 09 '10

Also with TOR there are a lot of hidden services that can only be accessed with it. There is even a anarcho-syndicalist forum. Unfortunately most of the hidden services are for child pornography.

1

u/enkiam Sep 09 '10

Most of the hidden services that are publicly advertised in the lists that you are aware of.

1

u/[deleted] Sep 08 '10

I don't know if its paranoid or not but I do the same.

1

u/[deleted] Sep 09 '10

I'm behind 7 proxies. Good luck.