How does Hotspot Shield VPN handle SSL (HTTPS) traffic?

[BrazilianBlue]

Hi everybody.

I was wondering about the way Hotspot Shield for PC handles SSL (HTTPS) traffic.

With Hotspot Shield running, I browsed Whatsmyip.com and the results were disturbing:

1) http://www.whatismyip.com/ => Hotspot Shield proxy IP shown.
2) https://www.whatismyip.com/ => My real IP shown!

Over non-secure (HTTP) connections, even flash and java tests (e.g., ip-score.com decloaking tests) are unable to discover my real IP address, but there seems to be an issue with Hotspot Shield and secure traffic.

Does this software completely ignore SSL traffic?

Thanks.

 

[noidea_77]

The intention of Hotspot Shield is, to encrypt your data on the wireless connection, so nobody else can listen to it. https traffic is already encrypted and the secure connection is initiated by your browser. A redirect to another ip-address would require a man-in-the-middle attack and that´s what we sure don´t want.

 

[bill001g]

The key here is to make it so your machine does not know his own real IP. Programs can always get them when you machine tells them. If you run them via a nat router then your machine only has the private internal ones and only the router know the real ip

 

[BrazilianBlue]

So, Hotspot Shield really ignores SSL traffic...

Wouldn't that be a privacy problem (real IP address revealed) Hotspot Shield was meant to solve?

 

[bill001g]

Hotspot shield was meant to protect the data from over the air capture of unencrypted hotspots and even from malicious hot spot owner. The fact that it hides the ip address is just a byproduct it is not the primary intent of the product

 

[okurka]

Hotspot shield was meant to protect the data from over the air capture of unencrypted hotspots and even from malicious hot spot owner. The fact that it hides the ip address is just a byproduct it is not the primary intent of the product

Taken from the Hotshield website:

Protect your IP address – Our VPN software enables you to protect your IP address so you can enjoy private browsing and prevent hackers and spammers from monitoring your online activities. http://www.hotspotshield.com/hide-ip-address

Surf the Web anonymously – By creating an encrypted tunnel between your computer and our servers, Hotspot Shield enables you to surf the Web anonymously without being tracked or spied on. http://www.hotspotshield.com/anonymous-web-surfing

 

[bill001g]

That is a bunch of bull sales stuff. It assumes you are running behind a router using private addresses. You are far from anonymous from the end servers you are using. They can get the serial numbers of your cpu and video cards if they want. They are playing fast and loose with the terms. Your actual IP is in no way protected from hotspot attackers they can see it. They can't see what you are doing so much but they can directly attack your machine if they choose. The far end device also can get your actual IP if you are running without a nat device.

Too many people have no clue how things work and just believe the marketing pitch....maybe they think if they drink red bull they can fly too.

 

[okurka]

Your claim was that Hotspot Shield was meant to encrypt data and hiding IP was just a byproduct. They clearly state the hiding of your IP is one of their main features.

So OP was correct to be disturbed about the https results.

 

[bill001g]

And you point would be..... We agree they are not telling the whole truth about hiding the IP.

 

[Security_is_essential]

Can someone tell me how is our ip initially encrypted by Hotspot shield and what is the encryption key

 

[Faiz Mohammed]

1) http://www.whatismyip.com/ => Hotspot Shield proxy IP shown.
2) https://www.whatismyip.com/ => Shows real IP !

Over non-secure (HTTP) connections, even flash and java tests (e.g., ip-score.com decloaking tests) are unable to discover the real IP address. This is because the hotspot shield do not change your IP permanently, It changes your IP address temporarily. So a secure connection website can detect your IP address.

If you have any more doubts about hotspotshield, Go to : http://hotspotshieldproblemfix.blogspot.com and learn more tips about hotspot shield.