Opera Mini for Cell phone Banking

[SanchoP]

.

 

[sn3rd]

AFAIK Opera Mini DOES have SSL support, but I doubt it's very good. Prob allows self-signed certificates without any prompts

 

[xrapidx]

Doesnt cellphone banking use SMS?

 

[The_Techie]

Opera Mini does support some SSL as far as I'm aware. However, I am far too paranoid to trust cellphone banking, especially if it does accept SSL certificates without verification...

 

[sn3rd]

Opera Mini does support some SSL as far as I'm aware. However, I am far too paranoid to trust cellphone banking, especially if it does accept SSL certificates without verification...

Is there an echo in here?
Just kidding

You might try browsing to a server with SSL (and a dodgy self-signed certificate), to see how Opera Mini handles it

 

[The_Techie]

Is there an echo in here?
Just kidding

You might try browsing to a server with SSL (and a dodgy self-signed certificate), to see how Opera Mini handles it

It's called agreeing with someone

I think I might just know of one such website...

EDIT: Yes, it did accept the "dodgy" SSL certificate without any warnings.

 

[sn3rd]

It's called agreeing with someone

I think I might just know of one such website...

EDIT: Yes, it did accept the "dodgy" SSL certificate without any warnings.

*ducks*

So the story as it stands: Opera Mini's version of "supprting SSL" is allowing the user to browse "SSL-secured" sites, without actually making use of the first and most fundamental security measure.

@WKJ?:beanie:
When you use your PC to browse to that site, does your browser complain?

 

[The_Techie]

@WKJ?:beanie:
When you use your PC to browse to that site, does your browser complain?

Yes it does, that's why I'm kind of surprised that it just silently accepts it...

 

[Gambit]

i stand to be corrected but i think that opera mini uses a proxy server that reformats and compresses web pages to view in the opera mini browser. I would say it may not be such a good idea to give the opera mini proxy server your banking login credentials and access to your banking session.

 

[sn3rd]

i stand to be corrected but i think that opera mini uses a proxy server that reformats and compresses web pages to view in the opera mini browser. I would say it may not be such a good idea to give the opera mini proxy server your banking login credentials and access to your banking session.

That actually sounds familiar: I think that's how they could offer that zooming thing for pics

 

[Syndyre]

Go to sbcell.co.za in your normal WAP browser, works fine for me. You have to enable cellphone banking in your internet banking profile first though.

 

[Syndyre]

i stand to be corrected but i think that opera mini uses a proxy server that reformats and compresses web pages to view in the opera mini browser. I would say it may not be such a good idea to give the opera mini proxy server your banking login credentials and access to your banking session.

Yeah it does, you save bandwidth that way too.

 

[koffiejunkie]

http://www.operamini.com/help/faq/#security

Q: Is there any end-to-end security between my handset and — for example — paypal.com or my bank?

A: No. If you need full end-to-end encryption, you should use a full Web browser such as Opera Mobile.

Opera Mini uses a transcoder server to translate HTML/CSS/JavaScript into a more compact format. It will also shrink any images to fit the screen of your handset. This translation step makes Opera Mini fast, small, and also very cheap to use. To be able to do this translation, the Opera Mini server needs to have access to the unencrypted version of the Web page. Therefore no end-to-end encryption between the client and the remote Web server is possible.

Q: Can Opera Software see my passwords and credit card numbers in clear text? What is the encryption good for then?

A: The encryption is introduced to protect the communication from any third party between the client (the browser on your handset) and the Opera Mini transcoder server. If you do not trust Opera Software, make sure you do not use our application to enter any kind of sensitive information.

Not to be confused with Opera Mobile:

http://www.opera.com/products/choose/

 

[Syndyre]

I wonder then if it would be safer to use the built it browser...

I think it would be, should be fully encrypted that way.