Collaborate Disseminate
I’m trying to setup a custom order of TLS cipher suites according to this Microsoft list, on Windows Server 2022 but the outcome is not the one that I was expecting.
After using the powershell to disable a bunch, and set a preferred order… Continue reading Cipher Suites settings wrong order?
Let’s assume that I am logging into my Gmail account from my browser using my username and password. I know that my input will be encrypted using Google’s private key and the only one who can decrypt it is Google’s server. So Google’s serv… Continue reading Man in the middle attack on response from server [duplicate]
If anyone can answer me pls I just need an anwer. I know thus isn’t maybe right place for this question
I created chatting app with sockets in Java 8 and i use TLS 1.2 My question is: Is there any way that someone can read data i send(read… Continue reading Is there a way someone can read arrays of bytes which I send with java sockets while using TLS 1.2?
I have built a https server on google cloud platform. This can now be visited by anyone, I wanted to avoid this by using client certificates.
So with this the question is how do I get a client.cert and how can I apply this to my frontend l… Continue reading How do i manage my client certificates on google cloud platform? [migrated]
We have a situation where we have an architecture that calls for a Web based UI for querying some data and the data input is through rsync over SSH. I think it would be easier to manage and more secure if we just tunnel SSH through HTTPS s… Continue reading SSH over HTTPS or Directly open Non Standard port
I am working with a vendor’s appliance, and they use the default Java cacerts for adding certs for allowing self-signed certs. When working on this process, I noticed that the cacerts uses the default password changeit
For increased securi… Continue reading Where is a CAcert’s password used? [closed]
Requested our operations partner to configure TLS for Db2 on z/os. All fine when using OpenSSL version 1.x to verify, but it just won’t happen when using openssl version 3.x, and I’m not able to understand why. Assuming that there is some … Continue reading OpenSSL s_client not able to connect to the server with Openssl 3.x
I’ve been researching the main TLS 1.1 vulnerabilities, and from what I’ve seen, TLS 1.2 only improves the cryptographic hash functions, because TLS s 1.1 are broken.
If these hash functions are vulnerable, is there any way to break TLS 1…. Continue reading Are there any attacks against TLS 1.1 encryption?
I am designing a web access gateway that authenticates users through certificates using the mTLS mechanism. I would like to be able to identify the users that access the system using a Smartcard and separate them from those that do not in … Continue reading Determine if the client certificate comes from a smarcard in mTLS
I know HTTP is insecure because the data transmitted is not encrypted.
I made a web application, however, that the frontend and backend are hosted on different servers. The backend itself is configured with HTTPS, but the frontend is not y… Continue reading POST over HTTP: Is it ever safe to post sensitive information?