The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
0answers
77 views

Should I force Thunderbird to avoid RFC5746 and CVE-2009-3555 security bugs?

I see that the latest version of Thunderbird (38.0.1) still has the defaults set to ignore the error. Is this a big problem? Should I change the defaults to enforce greater security? Here is ...
2
votes
0answers
790 views

Java Updates Restrict Unsafe SSL Renegotiation With Active Directory Servers

We have two active directory (AD) hosts, ead01.domain.com and ead02.domain.com; we also have a corresponding service domain, at eadauth.domain.com which round-robins between these AD hosts (via DNS). ...
1
vote
0answers
25 views

What level of protection does the secure remote password protocol provide against the Pass the Hash attack?

What level of protection does the secure remote password protocol provide against the Pass the Hash attack? I have read a lot about the secure remote password, and in the Stanford "What is it?" page ...