Pfft comments on Open thread, Feb. 9 - Feb. 15, 2015 - Less Wrong

6 Post author: MrMind 09 February 2015 09:12AM

You are viewing a comment permalink. View the original post to see all comments and the full post content.

Comments (321)

You are viewing a single comment's thread. Show more comments above.

Comment author: ike 09 February 2015 05:44:39PM 5 points [-]

Is there a good way to save all of my browsing data locally? I'd ideally want something that gets anything fetched on my computer, including headers and any signatures needed to prove that a site really sent something. I also want it to be searchable easily by keyword and site.

Comment author: Pfft 11 February 2015 10:16:19PM *  2 points [-]

Hm, reading up a bit about SSL/TLS, it seems this will not work. Apparently it uses a Message Authentication Code to ensure authenticity, not a signature. But that means that even if you have all the data sent by the server, you still can't prove to a third party that you didn't modify it.

I'm not sure, but possibly you could prove that you did an SSL handshake with the server at a given time, so you can prove that the server sent "something", but not necessarily the particular thing you have. :)