Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <python-python-list@m.gmane.org>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.010
X-Spam-Evidence: '*H*': 0.98; '*S*': 0.00; 'sufficient': 0.05; 'http': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'thus,': 0.09; '(it': 0.16; 'address)': 0.16; 'logger': 0.16; 'received:80.91.229.3': 0.16; 'received:dip0.t-ipconnect.de': 0.16; 'received:plane.gmane.org': 0.16; 'received:t-ipconnect.de': 0.16; 'sees': 0.16; 'tcp': 0.16; 'subject:request': 0.19; 'machine': 0.22; 'header:User-Agent:1': 0.23; 'header:X -Complaints-To:1': 0.27; 'host': 0.29; 'rest': 0.29; 'writes:': 0.31; 'level.': 0.33; 'maybe': 0.34; 'subject:the': 0.34; 'computing': 0.35; 'but': 0.35; 'there': 0.35; 'charset:us-ascii': 0.36; 'being': 0.38; 'server': 0.38; 'to:addr:python-list': 0.38; 'use.': 0.39; 'sure': 0.39; 'to:addr:python.org': 0.39; 'received:org': 0.40; 'received:217': 0.63; 'protection': 0.63; 'secret': 0.74; 'protect': 0.79; 'enforcement': 0.84; 'preached': 0.84; 'encrypted': 0.91; 'surveillance': 0.91
X-Injected-Via-Gmane: http://gmane.org/
To: python-list@python.org
From: dieter <dieter@handshake.de>
Subject: Re: encrypt the http request url on the local machine
Date: Tue, 09 Dec 2014 08:19:43 +0100
References: <0b8ebdd8-9df5-4a99-b226-590cd3d3cef6@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Gmane-NNTP-Posting-Host: pd9e0b4f7.dip0.t-ipconnect.de
User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.22 (linux)
Cancel-Lock: sha1:t5eA4GrSJ4t3elUbuS28BG0HRGk=
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.16763.1418109599.18130.python-list@python.org>
Lines: 15
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1418109599 news.xs4all.nl 2946 [2001:888:2000:d::a6]:54228
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:82185

iMath <redstone-cold@163.com> writes:

> my software on the local machine needs to send http request to a specific web server , is there any way to protect the http request url from being found by Packet analyzer software like Wireshark and fiddler. The sever is not mine, so I can do nothing in the server .

Not sure about "fiddler" but "wireshark" is a logger at tcp level.
When you use "https" (rather than "http"), a tcp logger may still see
the host (it definitely sees the IP address) but will not see
the rest of the url (as this is transmitted in encrypted form).

The protection provided by "https" is sufficient for "normal" use.
I recently heared a scientific talk suggesting that "https" protection
can be preached with a lot of computing power. Thus, there is likely
no protection against secret service surveillance (and maybe law
enforcement agencies).