Collaborate Disseminate
I’m somewhat knowledgeable in the concept of Public Key Pinning (HPKP) and I see a potential attack where a server admin could pin a particular cert and thus demanding user’s browsers to only honour that particular certificate.
However, if… Continue reading Public Key Pinning Attack? [duplicate]
Some specific websites do not load when I proxy them with Burp Suite. I use Firefox and I can not find any solution to disable security in Firefox.
In this question there is mentioned a solution for chrome.
Please guide me to find an equiv… Continue reading Specific website does not load when I proxy it through Burpsuite with Firefox [closed]
For dyndns it’s fairly easy to replace the machine behind a domain name: either if the subscription runs out or if the IP changes and the dyndns service hasn’t been updated. In that case one can trivially request a new valid … Continue reading Is there an alternative to HPKP for dyndns?
The latest stable release of Google Chrome, version 72, has removed support for the aging 1.0 and 1.1 versions of TLS, as well as for the problematic HTTP-based Public Key Pinning protocol and FTP resources. The Transport Layer Security (TLS) protocol… Continue reading Google Chrome Drops Support for TLS 1.0 and 1.1
I am developing an Arduino application that communicates with my web server over SSL.
I have successfully done certificate pinning as described in this tutorial:
https://www.google.com/amp/s/techtutorialsx.com/2017/11/18/esp… Continue reading Arduino SSL public key pinning [on hold]
I‘m facing the implementation of certificate pinning and often get asked why if there are trust stores within android. iOS does not have such a concept so I’m required to build the standard HPKP and Pin two public keys.
I h… Continue reading Whats the difference between certificate pinning and a truststore in Android/iOS?
I’m trying to understand DANE and TLSA records more accurately. Is it fair to call DANE the DNS-variant of (or at least a very similar technique to) HTTP Public Key Pinning (HPKP)?
Because with HPKP a SSL certificate can be… Continue reading Is DANE the DNS-variant of HTTP Public Key Pinning (HPKP)?
I’m trying to understand DANE and TLSA records more accurately. Is it fair to call DANE the DNS-variant of (or at least a very similar technique to) HTTP Public Key Pinning (HPKP)?
Because with HPKP a SSL certificate can be… Continue reading Is DANE the DNS-variant of HTTP Public Key Pinning (HPKP)?
This question already has an answer here:
Detect man-in-the-middle on server side for HTTPS
1 answer
I have 2 questions r… Continue reading HTTPS Inspection: how to detect at (own) server? / does it break Apache digest authentication? [duplicate]
Google says upcoming version of Chrome will deprecate the browser’s support for HTTP public key pinning. Continue reading Google to Ditch Public Key Pinning in Chrome