-2
votes
2answers
147 views

Is “HTTPS” ~100% secure? [duplicate]

Before I login to a trusted website, I always check that the address bar has a green padlock and the URL has no typos. E.g: After I've seen the green padlock and checked the domain ...
3
votes
0answers
48 views

What's stopping DANE? [closed]

As I understand it, DANE (RFC 6698) is a promising candidate for addressing issues with current TLS Trust Anchors (i.e. Trust Anchors). My attempt at explaining the issue: Currently, CAs are ...
14
votes
7answers
2k views

Can a HTTPS connection be compromised because of a rogue DNS server

If I'm visiting (just a desktop pc, client side) a site that has a valid HTTPS cert/connection, that can it be compromised if I'm using [not with free will, so e.g.: I'm "attacked"] a rouge DNS ...