Collaborate Disseminate
When connected to my home network, I only use the Facebook app on my phone. I never log into Facebook via a browser on my laptop or other computer connected to my home network.
How is it possible that when I search for something on Google … Continue reading How are advertisements through Facebook targeting me moments after searching on a different computer
Taking into account a Root of Trust in a device using a TPM.
My understanding is that the bootloader, firmware, operating system, applications etc. are all verified on startup by validating signatures with the vendors public key.
The TPM E… Continue reading TPM Endorsement Key usage in secure and trusted boot
My understanding is that secure boot works by verifying each stage in the boot process before proceeding. So first, UEFI or booting firmware will validate the signature of the bootloader, then kernel, applications etc. before loading.
When… Continue reading Secure boot after an OTA update confusion
My understanding is that when a browser accesses a website, the website server sends to the browser a signed certificate. The main goal is that the browser receives a public key that will be used to initiate an encrypted session.
Correct m… Continue reading Browser verifying signed certificates using TLS [duplicate]
I am able to SSH into an Embedded Linux device remotely using a private key with the following command as example (where id_rsa is the private key file):
ssh -i id_rsa root@192.168.30.199
This will be authenticated on the device using th… Continue reading can an SSH session be initiated with a public key
I’m still not completely sure about the role of using an HSM or TPM on a device when it comes to storing private keys for security purposes.
My use case would be using TLS with an embedded device which contains a unique self-signed device … Continue reading Does / Can a HSM or TPM encrypt my private keys
Up until now, I believed that TLS authentication and encryption can only be achieved when both the client and server exchange certificates with each other initially? Now I am seeing an example in Python code where an MQTT client is communi… Continue reading TLS with only server certificates [duplicate]
Is “IAM” access the only method to gain access AWS?
I’m asking because I’m using AWS IoT. With AWS IoT we create things such as devices on AWS IoT Core.
However, with IAM access, after creating a “thing”, I am able to commu… Continue reading Communicating with things on AWS IoT without certificates problem
Relating to TLS and SSH. If my private key is password / passphrase protected, how is this then used automatically during TLS or SSH communication without asking me for the password?
When using SSH, my private key is stored on my computer safely and my public key is given to the other party I wish to communicate with.
I understand that the two keys are mathematically related, and so what is encrypted wit… Continue reading How does the public key get authenticated during an ssh session