Collaborate Disseminate
When visiting a website that uses HTTPS, we can see its certificate in the browser. But how can we know for sure which validation process the company or domain behind the website has gone through?
Validation processes: OV (Organization Val… Continue reading How to determine validation process of a certificate used by a website using HTTPS?
I want to know whether it’s safe to use a pirated software if during all of the processes including (downloading, running installer, installing, using and scanning installed files) the system’s antivirus/antimalware doesn’t detect anything… Continue reading Is it safe to use pirated software if AVs don’t detect anything malicious about it?
I use dnscrypt-proxy’s anonymized DNScrypt with multiple relays, force it all to use TCP, route them over Tor.
does this prevent my ISP or anyone in my country to see my DNS queries and client hellos when connecting to websites and servers… Continue reading Is Anonymized DNSCrypt over Tor a better alternative to having Doh+ECH?
Let’s say a country or ISP is malicious, forces citizens/users to install trusted root certificate on their devices so they can view all HTTPS traffic, but why is this even necessary? why can’t they just redirect all the traffic to a netwo… Continue reading Why a malicious ISP/government would need to install certificate on users’ devices instead of any device in the middle of the data transit route? [duplicate]
Can websites, server-side apps such as those that rely on a constant connection with server e.g. messaging apps, server-side online games such as those that rely on constant server connection for player movement, inventory data etc. tell t… Continue reading Can applications or websites know if their traffic is decrypted and re-encrypted by Fiddler? [duplicate]
I’m looking for a way to find out which certificates, whether machine level or user level, came preinstalled with Windows (when using official Microsoft ISO file to clean install the OS) and which certificates were installed afterwards, by… Continue reading Is there a way to find out which certificates came preinstalled with Windows and which ones installed afterwards?
I use an encrypted DNS server that supports DNSSEC and DoH, these features are useful for hiding from the ISP, VPN server provider etc. which website you are trying to look up, but eventually those parties will know which website you looke… Continue reading What’s the use of encrypted DNS when ISP can see the IP address of the website?
I’m looking for a method to check whether DNS over TLS is blocked in my network by my ISP or not. A method that isn’t just trial and error of a bunch of popular DoT providers to see which one connects because I need to know for a fact that… Continue reading How to check to see whether DNS over TLS is blocked in my network by ISP?
For dyndns it’s fairly easy to replace the machine behind a domain name: either if the subscription runs out or if the IP changes and the dyndns service hasn’t been updated. In that case one can trivially request a new valid … Continue reading Is there an alternative to HPKP for dyndns?
This suggests that to restrict a user to a specific command with sudo a line like
%web ALL=(ALL) /usr/bin/service apache2 *
can be used. This particular line would restrict the user to running the mentioned program /usr/b… Continue reading Is an asterisk in sudo command specifications safe?