[gold_y]

hey guys i have been thinking about this for a while and would like someone more experienced to answer that.I use Gmail and have enabled HTTPS: browser connection option.Can someone tell me if my ISP can still read my email??or maybe see my online bank transactions??

[cwwozniak]

They could if they wanted to by using a "man-in-the-middle" attack:

http://www.contentverification.com/m...dle/index.html

[Fray]

Nope they can see how much bandwidth your using but like a vpn connection they can't see what's actually being sent and recieved.

<edit> Yes technically they could with a mitm attack but I don't think they're curious enough to violate federal law to see what your doing.

[gold_y]

well who do i trust 1st post or second?

[cwwozniak]

The question should be is do you trust your ISP.

[gold_y]

i'd rather say "do i have a option??I cant really do anything on the internet without an ISP.Now can I?""

[cwwozniak]

Originally Posted by Fray

Yes technically they could with a mitm attack but I don't think they're curious enough to violate federal law to see what your doing.

What if the Feds are the ones asking the ISP to do the snooping?

[gold_y]

yeah and then there is the patriot act that makes it legal

[Fray]

They would have to have a wiretapping warrant from a federal judge to do it legally even if the feds asked and to get a warrant they have to have evidence to convince the judge of illegal activity.

[gold_y]

by the way would i know if they are doing it??i dont think so?but just curious

[Fray]

If you have reason to believe the government is using the patriot act to investigate you then you're pretty much up a creek no matter what you do so I wouldn't worry about it.

[gold_y]

hey i am just wondering i aint even in US.Just trying to find out how secure i am on the internet.

[gold_y]

and can i know if the MITM attack is happening on me??

[Fray]

Well your computer when requesting the IP address of a secure site that they're monitoring will return an address on a different subnet (compared to the address you get from any other computer).

If they just go to the company of the site they want to monitor with a warrant though then no there's no way to tell (and they can view your history instead of just what your currently doing).

[cwwozniak]

[

Originally Posted by Fray

They would have to have a wiretapping warrant from a federal judge to do it legally even if the feds asked and to get a warrant they have to have evidence to convince the judge of illegal activity.

Wish it was true. Ever hear of FISAAA?