2015-09-15 - Re: [GRASE-Hotspot] User activity

Header Data

From: bu***n@gmail.com
Message Hash: 2ccd80f16762003b0714992e952fb3d0bd7cef33e389129a38a455e6565d5613
Message ID: <20150915084110.4616272.76721.6452@gmail.com>
Reply To: <CAESLx0K2XDj8_Vqc+R1ACwvaw4a_pQKJTc4ckhor4V6NNCEMUw@mail.gmail.com>
UTC Datetime: 2015-09-15 01:41:10 UTC
Raw Date: Tue, 15 Sep 2015 15:41:10 +0700

Raw message 


Thank you Tim, I'm really appreciate with you, i understand about security access especially Https, i dont think to get url who's access mobile or internet banking, i ask this because you say "more and more traffic moving to HTTPS', if its can we get url log for HTTPS access, we do it becouse it's educational institution, much of website now using https not just internet banking, bitcoin mining, youtube, social networking, dating or porn site. And much more. 

I just want discuss with you about HTTPS activities..
Thank you "grasehotspot is really HotSpot Solution ‎"
Regards

Boegie
  Original Message  
From: Timothy White
Sent: Selasa, 15 September 2015 15.06
To: Grase Hotspot
Reply To: gr***t@grasehotspot.org
Subject: Re: [GRASE-Hotspot] User activity

I've tried my best to write an FAQ about this.
https://github.com/GraseHotspot/grase-www-portal/wiki/FAQ#why-dont-i-see-all-websites-someone-has-visited-in-the-session-report-why-dont-https-sites-show-up

Please feel free to improve the FAQ, especially if you can make it
easier for people to understand!

The short version, HTTPS traffic doesn't pass through the transparent
proxy (and can't) so we can't log it. The methods for logging HTTPS
traffic require the user to modify their device, so I'm not
implementing them. On a side note, I also don't agree with the methods
for inspecting HTTPS traffic, as it's supposed to be secure traffic,
and I don't want someone doing online banking to be exposed to
unnecessary risks because someone wants to see exactly what URL's you
are accessing.

Regards

Tim

On Tue, Sep 15, 2015 at 2:21 PM, Firman Bugi <bu***n@gmail.com> wrote:
> hi Tim,
>
>
> can we get a history or log activity for HTTPS trafic ???
>
> its very use full for control user activity??
>
> thanks for great support
>
>
> Boegie
>
> On Monday, September 14, 2015 at 4:07:32 PM UTC+7, timwhite88 wrote:
>>
>> Hi Viktor
>>
>> Assuming everything has worked correctly, the report should show you
>> the URL's of all HTTP traffic. Due to how HTTPS works, we can't see
>> any of the URLs, not even the domains, of HTTPS traffic. More and more
>> traffic is moving to HTTPS, so you'll probably find less in the report
>> than a few years back.
>>
>> If you are sure you are accessing HTTP sites, there may be a bug that
>> needs fixing.
>>
>> Regards
>>
>> Tim
>>
>> On Thu, Aug 13, 2015 at 5:51 PM, Viktor Nikolaev
>> <sy***.@gmail.com> wrote:
>> > Tell me why the report does not show the URL of websites, but only the
>> > volume of traffic What did I do wrong? Grase 3.7, www-portal 3.8RC1
>> > Ubuntu
>> > server 12.04
>> >
>> > --
>> > This mailing list is for the Grase Hotspot Project
>> > http://grasehotspot.org
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "Grase Hotspot" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> > an
>> > email to gr***.@grasehotspot.org.
>> > To post to this group, send email to gr***.@grasehotspot.org.
>> > Visit this group at
>> > http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> > To view this discussion on the web visit
>> >
>> > https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/a554b024-7734-46a1-9d8c-e351fb990b56%40grasehotspot.org.
>
> --
> This mailing list is for the Grase Hotspot Project http://grasehotspot.org
> ---
> You received this message because you are subscribed to the Google Groups
> "Grase Hotspot" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to gr***e@grasehotspot.org.
> To post to this group, send email to gr***t@grasehotspot.org.
> Visit this group at
> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
> To view this discussion on the web visit
> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/07bf9db0-9081-4273-98ce-5f2c013184a2%40grasehotspot.org.

-- 
This mailing list is for the Grase Hotspot Project http://grasehotspot.org
--- 
You received this message because you are subscribed to the Google Groups "Grase Hotspot" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gr***e@grasehotspot.org.
To post to this group, send email to gr***t@grasehotspot.org.
Visit this group at http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
To view this discussion on the web visit https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAESLx0K2XDj8_Vqc%2BR1ACwvaw4a_pQKJTc4ckhor4V6NNCEMUw%40mail.gmail.com.

Thread