Tagged Questions
1
vote
1answer
65 views
How to have Thunderbird include a root certificate?
An eMail signed via S/MIME also contains the X.509 certificate chain containing the public key in order to directly verify the signature (assuming its issuing CA is deemed trustworthy). The chain does ...
0
votes
1answer
100 views
What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?
Can I make assumptions about minimum and maximum key sizes if all I know about a TLS server is the fact that it uses DHE_RSA for key exchange?
Can the server be configured to use weak key sizes for ...
-1
votes
1answer
145 views
GPG advantages / disadvantages, is it useful or secure? [closed]
I thinking about GPG, is very widely used, but is secure? Why and where we using GPG?
I found an article from 2002, but is very old.
117
votes
7answers
6k views
How do certification authorities store their private root keys?
Knowledge of a CA private key would allow MitM attackers to transparently supplant any certificates signed by that private key. It would also allow cyber criminals to start forging their own trusted ...
10
votes
3answers
733 views
What's the common pragmatic strategy for managing key pairs?
I have a small number of different workstations (plus client devices like iPhone) that I use for to connecting to numerous servers using SSH.
Originally when I learned about PKI, I created a single ...
5
votes
1answer
211 views
PKI solution vendor selection
What would you look for in a (X.509-) PKI solution, and why would you look for that, given the following constraints:
Available programming/sw-engineering know how is limited (ie, "OpenSSL with a ...
6
votes
3answers
517 views
What are the pros and cons of outsourcing an organization's PKI?
I am looking for the pros and cons of outsourcing an organization's Public Key Infrastructure (PKI). I understand that the answer to whether or not to actually outsource is going to depend on the ...
