Collaborate Disseminate
Let’s say I am a member of a website. I always sign in from computer A, which is not linked at all with computer B, and I have always signed in from my home network.
Now let’s say my ISP releases the old IP, and I’m given a new one (still … Continue reading Privacy – If I get a new IP from my ISP (home network), can websites infer the new IP is me?
This question already has an answer here:
How can I know that the CA certificates in my computer have not been spoofed?
6 answers
… Continue reading How to check if installed Trusted CAs are not dangerous? [duplicate]
As you know, we use TLS for multiple purposes, including integrity, confidentiality and authentication and we use TSAs (Trusted Timestamp Authorities) to have signed timestamps for our data. (Read about it here)
The question… Continue reading How to have both TLS and Time Stamp Signing for data?
As you know, we use TLS for multiple purposes, including integrity, confidentiality and authentication and we use TSAs (Trusted Timestamp Authorities) to have signed timestamps for our data. (Read about it here)
The question… Continue reading How to have both TLS and Time Stamp Signing for data?
As you may know, you can query chrome’s HSTS/PKP sets for a domain in the page chrome://net-internals as below:
As you see above, there are four SHA256 hash values (in the middle of page and in base64 format) for www.googl… Continue reading Google’s Certificate Fingerprint doesn’t match with the Fingerprints in the Chrome’s "net-internals" configurations
There are 6 requirements mentioned in RFC 2560 for an OCSP response to consider as a valid OCSP response:
The certificate identified in a received response corresponds to that which was identified in the corresponding reque… Continue reading Ambiguous OCSP response acceptance requirements
As far as I know, this is the process of establishing a TLS connection between a client and a web server:
Client sends a TLS request (using a packet called Client Hello) to the server.
Server answers to the request with a S… Continue reading Usage of Diffie Hellman key exchange in TLS
I access a blog hosted by blogspot using Incognito mode. I comment on one of the posts, by signing into my Gmail account (as the blogger does not allow Anonymous comments). If I comment by visiting the blog on an Incognito window, will the… Continue reading Can a blog owner trace my IP address when I use incognito mode?