https login

[أحمد]

That doesn't explain "SSL uses public IP verification".

See post #16.

:wa:

 

[Dagless]

See post #16.

:wa:

Still doesn't make sense.

 

[أحمد]

Still doesn't make sense.

In that case, I'm probably not good enough at explaining. Allah knows best.

:wa:

 

[Dagless]

In that case, I'm probably not good enough at explaining. Allah knows best.

:wa:

That is a cop out since it is something you wrote.

SSL uses public IP verification; I don't think anymore needs to be discussed on this matter.

:wa:

It implies that the first part of the sentence is a strong enough argument to close all discussion on the matter.

However, the first part of the sentence does not really make sense. All websites on the internet would be public ip's. It's the same as saying "ssl is used on the internet; I don't think anymore needs to be discussed on the matter". It's not an argument either way... certainly not one to end debate.

 

[أحمد]

That is a cop out since it is something you wrote.



It implies that the first part of the sentence is a strong enough argument to close all discussion on the matter.

However, the first part of the sentence does not really make sense. All websites on the internet would be public ip's. It's the same as saying "ssl is used on the internet; I don't think anymore needs to be discussed on the matter". It's not an argument either way... certainly not one to end debate.

I was stating something, which should be obvious to someone claiming to know about https.

I don't see the point of trying to explain, as its clear, you're not interested in that. Your interest in merely in argument, which I'm not going to entertain.

If you wish to learn more about https, simply use google; it'll save you a lot of guessing time :inshallah

:wa:

 

[Dagless]

I was stating something, which should be obvious to someone claiming to know about https.

I don't see the point of trying to explain, as its clear, you're not interested in that. Your interest in merely in argument, which I'm not going to entertain.

If you wish to learn more about https, simply use google; it'll save you a lot of guessing time :inshallah

:wa:

Asking someone to clarify what they meant is not an argument. You made a statement based upon which you concluded no further discussion was necessary. The statement was not clear in any way. I don't think google will know what you meant any more than you seem to.

 

[أحمد]

Asking someone to clarify what they meant is not an argument. You made a statement based upon which you concluded no further discussion was necessary. The statement was not clear in any way. I don't think google will know what you meant any more than you seem to.

Use google to lookup "debate"; you'll be surprised to find "argument" to appear under its definition.

:wa:

 

[Dagless]

Use google to lookup "debate"; you'll be surprised to find "argument" to appear under its definition.

:wa:

"debate" was in regard to the thread. The only thing I asked of you was clarification of your comment. You know this already but see it as another excuse not to answer the question. This can be seen from your numerous posts of avoidance. If you're not going to reply with an answer to the question please don't derail the thread. Just keep in mind for next time to only respond with things you can justify/explain.

edit: lol you left negative rep for this post? really?

 

[أحمد]

"debate" was in regard to the thread. The only thing I asked of you was clarification of your comment. You know this already but see it as another excuse not to answer the question. This can be seen from your numerous posts of avoidance. If you're not going to reply with an answer to the question please don't derail the thread. Just keep in mind for next time to only respond with things you can justify/explain.

If you don't understand n explanation, its not my problem. In such a case, ignore my posts.

:wa:

 

[أحمد]

Let me break this down, for anyone struggling to understand SSL:

Post #16:

Logging in involves comparing password hashes; one which is generated when a password is created or changed, with the one generated when the user enters his or her password. The old string comparison system is almost non-existent in the 21st century, although there are cases where its still used. https isn't about using cyphertext; thats a common misconception. https actually uses SSL certification, which is a system of authencitating the connection, not the inputted string. As a standard, SSL uses 128 bit security, which is designed to make it more difficult for a "hacker" to "listen" into the connection.

Can SSL be bypassed? Yes.
Is it easy to bypass? Generally speaking, no.

vBulletin uses MD5 hashes by default, which are reasonably secure for any forum standard. As long as a user doesn't use the password "qwerty", or anything short, simple and "guessable", including dictionary words, then its OK.

The bit in red, is where public IP verification comes in. E.g. 84.45.40.98 is a Public IP address, while 192.168.1.8 is a Private IP address.

With me so far?

OK, moving on.

SSL is a socket encryption system, which encrypts the connection; very much like a lock and key structure of "enzyme and substrate". In this case, the packet is the substrate, while the encryption is the enzyme.

I really don't think I can help you, if you don't understand this. Try using google.

:wa:

 

[Dagless]

Let me break this down, for anyone struggling to understand SSL:

Post #16:



The bit in red, is where public IP verification comes in. E.g. 84.45.40.98 is a Public IP address, while 192.168.1.8 is a Private IP address.

With me so far?

OK, moving on.

SSL is a socket encryption system, which encrypts the connection; very much like a lock and key structure of "enzyme and substrate". In this case, the packet is the substrate, while the encryption is the enzyme.

I really don't think I can help you, if you don't understand this. Try using google.

:wa:

Firstly, thank you for finally explaining. I don't see it as significant (or as significant as the initial post suggested) since a public site would be impossible to verify using private ip address anyway, therefore it's moot... but I'm glad this matter came to an end.

 

[أحمد]

I'm glad this matter came to an end.

So am I.

:wa: