Collaborate Disseminate
I guess I have understood the basic concepts of DoT and DoH and how they prevent providers (ISPs) from analyzing my DNS queries and creating profiles. However, I have got a question which is so basic that it is probably quite stupid, but I… Continue reading What exactly is the sense of DoT with respect to privacy, given that my provider can log my destination IP addresses?
I guess I have halfway grasped the concepts of PGP, and I’ve halfway understood the concept of the Efail attack. However, I still don’t understand whether such attacks would be possible (and an MDC would be needed) even if all messages had… Continue reading Is there a use for an MDC even when all messages are signed?
With Thunderbird 78, a new PGP subsystem has been introduced which handles PGP keys internally. In previous versions, the add-on Enigmail has handled PGP-related stuff, by letting do GnuPG the work behind the scenes.
I currently know only … Continue reading How are the PGP keys that Thunderbird 78+ uses encrypted?
I am having some problems with understanding which types of host keys my SSH daemon actually provides or supports (stock debian buster, sshd 7.9.p1). From the manual (man sshd_config):
HostKeyAlgorithms
Specifies the host key al… Continue reading ssh -Q key not listing all key types?
I am currently trying to establish a VPN connection from my Windows 10 Enterprise 1909 to a remote VPN gateway, using the built-in Windows VPN / IPSec client. Since the UI does not provide all options I need, I have created and fine-tuned … Continue reading Windows 10 IPSec VPN not respecting configured parameters (notably: encryption method)
I am a long-time Firefox user and remember that usually the UAC prompt popped up when Firefox updated itself. Some months ago (or is it years?), Firefox obviously changed the way it updates itself: I didn’t see the UAC prompt since then in… Continue reading Firefox pretending to update itself, but actually not doing it, and thus being a risk for security – what am I missing?
I have noticed that Firefox and Chrome have opened ports for unsolicited inbound traffic in the Windows firewall. This happened with Windows 7 x64 and Windows 10. (Here, I am talking about the standard firewall integrated in … Continue reading How to prevent Firefox and Chrome from opening ports in the firewall?
I recently have bought a new notebook with a SSD system drive. I have installed and configured Windows 10 as needed (no personal data involved so far), and then have installed VC 1.22 and have encrypted the system drive (whic… Continue reading Security breach due to forced rescue file creation?
On one of my web servers, I have set up a password-protected directory using the well-known .htaccess / .htpasswd mechanism. The web server is run by Apache 2.4.10 under Debian jessie, if that matters. The relevant snippet from the virtual… Continue reading Firefox not deleting HTTP Basic authentication credentials although being instructed to do so
While researching how to encrypt private keys for SSH connections as securely as possible, I have run into the following very basic understanding problems (Note: I have used the newest stable release 1.0.2h of OpenSSL for my … Continue reading Basic question regarding OpenSSL and AES-GCM