Hello, Thanks again. You said "Unless you yourself manage/control the network you're connected to, there is ZERO expectation of privacy on the connection you're using. Even if you use your home network, there's no expectation that the ISP *won't* observe your traffic.", Can you tell me more?
On Saturday, October 21, 2023 at 08:43:11 AM GMT+3:30, Thomas Ward teward@thomas-ward.net wrote:
I reiterate my original statements:
Stunnel is not a VPN, so no it can't "hide your browsing". Hiding your browsing needs more than just stunnel because of how DNS and other components for browsing work.
So no, STunnel will not help you.
Tor is not a guarantee of a solution. Nor is a VPN.
UNFORTUNATELY, though "how to hide browsing" is beyond the scope of this list.
And I'm sorry to say, but as an IT Security professional myself, I must disclose to you this little nugget of knowledge: There is no such thing as "illegally looking at users' traffic" when using someone else's network. Whether they're harvesting credentials or not, it is NOT illegal for the network management people to look at the traffic of those who use their network - it's an implicit "You're at the provider's whims and choices".
Even in a corporate environment, there is no implication of security and privacy. Case in point: I am the primary sysadmin of my employer's network and security operations. Our firewall and other content filtration components decode traffic at the border BEFORE sending out to the Internet for requests. Theoretically, between the point of decryption and reencryption to go out the door, I could have nastyness in the firewall or other systems to harvest passwords, sniff activity, etc. The workplace has policies such as "Acceptable Use" and also the "You are consenting to activity on the work network being monitored." because, well, corporate security is a thing.
Unless you yourself manage/control the network you're connected to, there is ZERO expectation of privacy on the connection you're using. Even if you use your home network, there's no expectation that the ISP *won't* observe your traffic.
Thomas
On 10/21/23 01:07, Jason Long wrote:
Hello, Thank you so much for replies. First of all, I don't want to do anything illegal. I feel that the person who is in charge of managing the Fortinet and FortiGate devices is illegally looking at the users' traffic, and because I don't have access to the device, I can't prove it. If I use a VPN or Tor, can he\she still look at my traffic? Can Stunnel help me?
On Friday, October 20, 2023 at 10:52:22 PM GMT+3:30, Eberhard flash@vicsmba.com wrote:
Exactly! If people could get around the Forti products that easily they would not have the reputation they have! Eric VICS, LLC Eric S Eberhard 2933 W Middle Verde Rd Camp Verde, AZ 86322 928-567-3727 (land line) 928-301-7537 (cell phone) http://www.vicsmba.com https://www.facebook.com/groups/286143052248115 From: Thomas Ward via stunnel-users stunnel-users@stunnel.org Sent: Friday, October 20, 2023 6:11 AM To: Jason Long hack3rcon@yahoo.com; Stewart Anderson via Stunnel-users stunnel-users@stunnel.org Subject: [stunnel-users] Re: How do I hide my browsing? Stunnel is not a VPN, so no it can't "hide your browsing". Hiding your browsing needs more than just stunnel because of how DNS and other components for browsing work. Question 2 is beyond the scope of stunnel's list to answer. This said: If you have to ask how to hide your browsing that means you're violating your network's use policies, and with Fortinet and Fortigate in line it sounds like you're on a workplace network. Just don't use your workplace network for whatever shady stuff you're concerned about them finding you doing. Sent from my Galaxy -------- Original message -------- From: Jason Long via stunnel-users stunnel-users@stunnel.org Date: 10/20/23 09:05 (GMT-05:00) To: Stewart Anderson via Stunnel-users stunnel-users@stunnel.org Subject: [stunnel-users] How do I hide my browsing? Hello, In an internal network, they monitor web browsing through firewalls (Fortinet and FortiGate). I have two questions: 1- Can I use Stunnel to hide my browsing? 2- Can they capture usernames and passwords for email and other websites? Thank you.