The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
0answers
45 views

Should I force Thunderbird to avoid RFC5746 and CVE-2009-3555 security bugs?

I see that the latest version of Thunderbird (38.0.1) still has the defaults set to ignore the error. Is this a big problem? Should I change the defaults to enforce greater security? Here is ...
1
vote
0answers
502 views

Java Updates Restrict Unsafe SSL Renegotiation With Active Directory Servers

We have two active directory (AD) hosts, ead01.domain.com and ead02.domain.com; we also have a corresponding service domain, at eadauth.domain.com which round-robins between these AD hosts (via DNS). ...
1
vote
0answers
24 views

What level of protection does the secure remote password protocol provide against the Pass the Hash attack?

What level of protection does the secure remote password protocol provide against the Pass the Hash attack? I have read a lot about the secure remote password, and in the Stanford "What is it?" page ...