Article View: borland.public.cppbuilder.oodesign
Article #67Ideas on capturing SSL Data
From: Heinz Ketchup
Date: Mon, 11 Jul 2005 15:49
Date: Mon, 11 Jul 2005 15:49
21 lines
2770 bytes
2770 bytes
There aren't too many solutions, but... if anyone might have an idea, I'd love to hear it. We are connecting to a website using SSL. We submit data through their website (user data), and wait for a reponse on their side (confirmation / rejection). Our problem now is that their website / programmers aren't willing to compromise on a flaw we detected, this why we are interested in capturing the user data being sent and the response they provide. This is for C-SOX purposes. If you don't know about C-SOX, it's b/c of the Enron Scandle, and the Accounting nightmare they caused. So, one posed solution is to create our own webserver, mirror they're page, and have our webserver communicate to their webserver, while we capture the data being sent from us to them, and receiving it from them to us, passing on the data from our webserver to the users screen (middle man service). It should be seamless, this way we get both in/out traffic data. Downside to this is that the website we do interaction with constantly changes their data fields without warning or notice. So anything we mirror could have a sudden change that might crap things out. This is only 1 suggestion. If there are any out there, plz feel free to help. This seems like a bad work around, but we are running short on ideas. The data is submitted from a button on their screen, and the response is a pop up form box from their website indicating data confirmation / rejection. Our purpose is to track changes for same time frames. The user submits data for date "X", then needs to make another change for same date "X", we want to track that change, as the website only shows the current value. Again, this is for C-SOX purposes and has a financial impact on our company. Thanks, Heinz
Technical Details
Message-ID:
<42d29518@newsgroups.borland.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news2.google.com!newsfeed.gamma.ru!Gamma.RU!npeer.de.kpn-eurorings.net!border2.nntp.ams.giganews.com!nntp.giganews.com!pe2.news.blueyonder.co.uk!blueyonder!news-peer-test!btnet!newsfeed.bt.es!caladan.landsraad.net!newsgroups.borland.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 10db1e,afb0e6aea3e64de2,start X-Google-Attributes: gid10db1e,public X-Google-Language: ENGLISH,ASCII-7-bit From: "Heinz Ketchup" <heinz_like_the_ketchup@h0tmail.n0spam.c0m.n0spam> Sender: "Heinz Ketchup" <heinz_like_the_ketchup@h0tmail.n0spam.c0m.n0spam> Reply-To: "Heinz Ketchup" <heinz_like_the_ketchup@h0tmail.n0spam.c0m.n0spam> Subject: Ideas on capturing SSL Data Newsgroups: borland.public.cppbuilder.oodesign X-User-Info: 146.131.120.2 NNTP-Posting-Host: 207.105.83.66 Message-ID: <42d29518@newsgroups.borland.com> Date: 11 Jul 2005 08:49:44 -0700 X-Trace: newsgroups.borland.com 1121096984 207.105.83.66 (11 Jul 2005 08:49:44 -0700) Lines: 21 Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news2.google.com!newsfeed.gamma.ru!Gamma.RU!npeer.de.kpn-eurorings.net!border2.nntp.ams.giganews.com!nntp.giganews.com!pe2.news.blueyonder.co.uk!blueyonder!news-peer-test!btnet!newsfeed.bt.es!caladan.landsraad.net!newsgroups.borland.com!not-for-mail