Re: Security/Hacker exposure



Hi Galen,

Thanks for getting back to me.

The scan was offered free by Symantec on the bank's website and I thought I
would try it. The result was ok apart from the quote above. The bank's
website is secure but I was simply wondering whether I should be adjusting
some settings somewhere? The scan identified only one weakness (see above)
so it obviously needs to be closed but I don't know how to do it!

Would love some help with that!

Thanks,
Sweety

"Galen" wrote:

> In news:OeR22pLoFHA.320@xxxxxxxxxxxxxxxxxxxx,
> Rick "Nutcase" Rogers <rick@xxxxxxxx> had this to say:
>
> My reply is at the bottom of your sent message:
>
> > Hi,
> >
> > Is this on your machine? If so, it should read as closed. The bank is
> > running a web server and it should be open for them. https:// is how
> > the site should start, the key being the 's' indicating a secured
> > site. Just make sure the lock icon is displayed in the status bar (if
> > it's not on, click view/status bar) when you arre visiting the site.
> >
> >
> > "Sweety" <Sweety@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:1A55F5D3-9F05-4D39-8709-A29F473EA08A@xxxxxxxxxxxxxxxx
> >> Hi,
> >>
> >> I am a new member and would like some help please.
> >>
> >> I have internet banking and did a Symantec security scan on the bank
> >> website
> >> which indicated the following problem.
> >>
> >> "HTTP over TLS/SSL. A protocol for providing secure HTTP
> >> communication. It should be open only if you're running a Web
> >> server." Could someone please tell me what I need to do to fix this?
> >>
> >> Thanks,
> >>
> >> Sweety
>
> Just to add a bit to this... I notice you said you did a scan on the bank's
> site. Unless you're the admistrator of the banks server (which I assume
> you're not else you'd probably not be exposing stuff like this) there's
> nothing that you can do. However, the bank's site is indeed running a server
> and it's good that they have HTTP over SSL as that's what makes it secure.
> I'd certainly not trust a bank's site that wasn't secure.
>
> Galen
> --
>
> "Chance has put in our way a most singular and whimsical problem, and
> its solution is its own reward."
>
> Sherlock Holmes
>
>
>
.



Relevant Pages

  • Secure website (cookie/session)
    ... Secure a part of my website. ... access to server settings (session timeout, security,...). ... do not lose time re-submitting it because the use was redirect to the ...
    (microsoft.public.inetserver.iis.security)
  • Secure website (cookie/session)
    ... Secure a part of my website. ... access to server settings (session timeout, security,...). ... do not lose time re-submitting it because the use was redirect to the ...
    (microsoft.public.inetserver.iis.security)
  • Removing Requirment for an SSL connection
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis)
  • Removing Requirement for SSL
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis.security)
  • Re: Scammers
    ... > We post info and ideas for discussion,we do not advertise a tipping ... > the ass of logging on to a website friend... ... Are you sure you are not being too cynical David? ... then off to the bank. ...
    (uk.sport.horseracing)