Collaborate Disseminate
Question Background
This morning, by accident I have found, that there is basically a backdoor in a dormant state in my Dell laptop: Computrace, which comes from Absolute Software – link to their Web, link to Wikipedia.
A… Continue reading Could Intel SGX be dangerous under Linux?
I am about to decide what SHA-512 hash sum and / or GPG verification scheme I will choose.
Let me present you with two options:
Signing the 25 GB ~ 23 GiB (one file fit to a Blu-Ray) directly with:
$ gpg –local-user &l… Continue reading Is there a security difference between GPG signing a file directly or its SHA512SUM file?
I began using ProtonMail email service, I like it that much, that I connected my domain yesterday and did appropriate changes to DNS.
This page of ProtonMail’s knowledgebase says how DMARC shall be set up. An image for the w… Continue reading DMARC on ProtonMail custom domain
System: Linux Mint 19.
Today I created a new GPG key pair using:
gpg –full-generate-key
I armor-exported the public key and have run:
file *.public
As a surprise I found my key or format or whatever to be old:
PGP public key … Continue reading PGP public key block Public-Key (old) – What does the OLD mean?
Does giving out Dell service tag of my device pose a security risk?
If it does, please elaborate as to how.
Continue reading Does giving out Dell service tag of my device pose a security risk?
How to enable OCSP stapling on my FTPS server. Is it even possible with vsftpd or not?
Even if possible, would it be wise on an FTPS server? Isn’t that only a web-thing?
Current result:
High-Tech Bridge > SSL/TLS Server … Continue reading How to enable OCSP stapling on my FTPS server. Is it even possible with vsftpd?
I work heavily with SSH and SFTP, to be specific between two machines, both of which have their SSH port open on a public IP address.
What are the toughest SSH daemon settings in terms of encryption, handshake, or other cryp… Continue reading What are the toughest SSH daemon settings in terms of encryption, handshake, or other cryptographic settings?
Reading different articles, mentioning this one, for the sake of this question on old TLS topic.
Quoting part of the article:
30 June 2018 is the deadline for disabling SSL/early TLS and implementing a more secure encryp… Continue reading Is it already the right time to say goodbye to TLS1.1 support on web servers?
Yesterday my ISP dropped my connection for several hours. This idea came to me during that time.
Is it possible for my ISP to do MITM attack on my VPN when he knows I start it almost instantly as he turns on my connection ag… Continue reading Is it possible for my ISP to do MITM attack on my VPN?
Elliptic Curve Cryptography (ECC) in SSL
I read multiple sources on ECC topic, e.g.:
DigiCert, Entrust, and many others.
All of them contain some kind of such claim:
Stronger Keys
But, none of them contain actual p… Continue reading Elliptic Curve Cryptography (ECC) in SSL – Safe to use?