SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
2
votes
2answers
623 views
SSL verification of host name of https server
I recently found that a library I am using (specifically Apache HTTPClient) when is configured to verify the hostname of the remote server against the certificate's CN it just seems to be doing a ...
130
votes
9answers
8k views
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
I've often heard it said that if you're logging in to a website - a bank, GMail, whatever - via HTTPS, that the information you transmit is safe from snooping by 3rd parties. I've always been a little ...
14
votes
3answers
3k views
Convergence - an SSL replacement?
Today, Moxie Marlinspike, a security researcher famous for his research on Android and SSL and related protocols (author of sslstrip/sslsniff), released "Convergence" which says is "an agile ...
4
votes
1answer
320 views
Slow client key exchange in TLS?
I've been benchmarking my TLS performance, and I noticed that during the "write client key exchange" phase, there's significant overhead compared to all other actions. I'm wondering if there's ...
5
votes
3answers
242 views
DHE exchange and client authentication
If a server has a known public key and a Diffie-Helman exchange is performed and signed by that key, is there any benefit to authenticating the client before establishing a secure channel instead of ...
13
votes
4answers
917 views
How to detect “forged” SSL certificates from the webserver end
The company I work for sometimes intercepts employees ssl connections to https websites by making the ssl connection on their behalf from a proxy, and then using the own generated certificate to send ...
4
votes
3answers
246 views
Locking down web-based admin areas with personal SSL certificates
I've been tasked to setup a secure platform, where I've been asked to assign personal SSL certificates to administrators, and have the server only allow persons into the administration areas that have ...
8
votes
7answers
12k views
How can I determine the encryption strength of an SSL connection
If I've connected to a https url, how can I determine the cipher strength of the connection? My understanding is that after the asymmetric public-key handshake the information is encrypted using a ...
3
votes
3answers
770 views
Need to secure (and add SSL?) RPC port 443 on Win2003 server
So I received an email from my system administrator who wants me to secure a server I own that seems to have a vulnerability in port 443 (which is Windows RPC over HTTPS). Disabling it I know causes ...
10
votes
1answer
943 views
SSL TLS renegotiation vulnerability - current situation in clients
Reading about the SSL renegotiation problem CVE-2009-3555 one knows that servers supporting old type of renegotiation are vulnerable to data injection. We also have tools to test them (openssl ...
6
votes
1answer
1k views
SSL Session resumption and IDs
Some sites, as seen in the report for www.mbank.com.pl [ssllabs.com] or report for aliorbank.pl [ssllabs.com] do not support "Session resumption", either because IDs are assigned but not accepted ...
8
votes
2answers
807 views
Which cipher suites with AES cipher provide forward secrecy?
Does standard AES with RSA (reported by Opera as TLS v1.0 256 bit AES (1024 bit RSA/SHA)) provide perfect forward secrecy?
Which SSL3.0 and TLS1.0 ciphers do provide forward secrecy?
Which ciphers ...
6
votes
2answers
285 views
Design proposals for enhanced security for parts of Internet, e.g. for banking?
There is some recent discussion of some sort of "multilevel" internet, with e.g. a level defined for banking in which access is only granted after special authentication with "true names", special ...
4
votes
4answers
375 views
How secure is SSL?
Is it not true that SSL can be decrypted by simply having listened to the network activity of a PC on a network? (for example, from the first time a random PC connects to a coffee shop, and keep ...
43
votes
3answers
16k views
What's the difference between SSL, TLS, and HTTPS?
I get confused with the terms in this area. What is SSL, TLS, and HTTPS? What are the differences between them?
3
votes
2answers
498 views
When should I use Message layer encryption vs transport layer encryption
Basically I will be having to secure a connection between different hops. Therefore even if TLS is widely known to be the best in class, I am wondering that in such a case message based encryption ...
3
votes
3answers
618 views
Paypal IPN, SSL and man-in-the-middle attacks
Okay, suppose I have been implementing paypal IPN, and my server will respond by verifying with "https://www.paypal.com/cgi-bin/webscr" and got the VERIFIED message back.
First, if my server connects ...
6
votes
3answers
4k views
Secure jquery ajax calls from a non secure page
I could not find a clear answer, but if I have the following situation:
I browse to a page let's say http://www.example.com/index.html
Now I use a form on this page to do a postback with jquery's ...
14
votes
4answers
745 views
What to transfer? Password or its hash?
Let's say in my database I store passwords hashed with salt with a fairly expensive hash (scrypt, 1000 rounds of SHA2, whatever).
Upon login, what should I transfer over the network and why? Password ...
2
votes
1answer
470 views
Is it possible to secure a web app without HTTPS? [duplicate]
Possible Duplicate:
Can you secure a web app from FireSheep without using SSL?
Think of a typical web application where the users log in, and then the session is kept with a session key. Is ...
9
votes
2answers
836 views
Secure communication between applications using SSL Certificates
I am looking for a way how to secure communication between our applications. There is a "server" application listening on some TCP port and "client" application which is communicating with the ...
15
votes
2answers
492 views
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
For example, say the following are HTTPS URLs to two websites by one IP over 5 mins:
"A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2".
Would monitoring of packets reveal:
nothing,
reveal only ...
23
votes
5answers
1k views
Why is HTTPS not the default protocol?
Why is HTTP still commonly used, instead what I would believe much more secure HTTPS?
5
votes
2answers
790 views
What tools exist to help me monitor OCSP certificate validation failures?
The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
4
votes
1answer
523 views
OCSP: What is “hackedirl.files.wordpress.com”?
After I ticked that my browser (Firefox) must require OCSP: http://i.stack.imgur.com/UeDXh.png
I got a window popped up (several times! And it still pops up.. ~randomly ~about a few 10 minutes): ...
13
votes
1answer
487 views
Are there any security problems with Google false start for TLS?
Google recently announced false start in Chrome browsers which increased TLS performance by 30%
http://news.softpedia.com/news/Google-Chrome-s-SSL-False-Start-201253.shtml
I know TLS has been poked ...
8
votes
3answers
4k views
SSL handshake failure modes
In SSL if the handshake is not succesful, does it always end with a handshake alert?
Or are there other ways to finish the SSL connection (acceptable by standard).
I am asking this, because in an ...
10
votes
7answers
783 views
Can a HTTPS connection be compromised because of a rogue DNS server
If I'm visiting (just a desktop pc, client side) a site that has a valid HTTPS cert/connection, that can it be compromised if I'm using [not with free will, so e.g.: I'm "attacked"] a rouge DNS ...
6
votes
2answers
786 views
Getting self-signed SSL certificates for all https connections made from some premises
Context:
I'm currently working as an expat for my company in a country where the Internet is notably untrustworthy. It made the headlines a few months ago for stealing facebook, twitter and gmail ...
11
votes
3answers
531 views
Incorrect use of HTTPS?
When I open https://java.com my browser says “untrusted connection” but when I open https://www.java.com my browser says it’s ok. But it's the same site.
So my question is: Is this a security bug? ...
7
votes
1answer
2k views
SSL replay attack when client/server random is missing
Hey studying the SSL protocol, I'm wondering how can someone be able to do a replay attack if the server nonce is missing? All the material I find says that nonces prevent it, but theres no examples ...
11
votes
2answers
2k views
symmetric encryption session keys in SSL/TLS
This question concerns the session send and receive keys used in SSL/TLS protocol. my understanding is that this key uses symmetric encryption (DES, AES, BlowFish, etc.) I'm wondering, if ...
6
votes
2answers
372 views
security of PKI, Certificates, certificate authorities, forward secrecy
I want to understand how certificates add to the security of information exchange.
Suppose i have a encrypted bidirectional connection between Alice and Bob, using a public key/private key pair. As ...
5
votes
3answers
468 views
Phishing virus found on server
I recently had a call from BELL concerning a virus on our Linux ( Debian ) Server. Apparently Google emailed our client about an Italian Database found on our server that was doing phishing. They ...
5
votes
1answer
593 views
TLS at layer 4 BUT 802.1X EAP-TLS at layer 2?
In the CISSP books, SSL/TLS has been through the arguments and fell rest onto the transport layer 2 instead of the session. OK - Fine.
Port security 802.1X and EAP is a data link layer 2 ...
4
votes
3answers
380 views
It is safe to buy a domain if I get this message in Firefox?
Greetings, I want to buy a domain name from a big registar(well known on the internet) but when I go to checkout I see that my link is going from full encrypted to “Connection Partially Encrypted” ...
5
votes
1answer
2k views
6
votes
2answers
1k views
What is the “openssh-blacklist” package? Is it related to the Debian OpenSSL bug?
What is the "openssh-blacklist" package? Is it related to the Debians OpenSSL bug?
10
votes
3answers
1k views
Computationally simple, lightweight replacement for SSL/TLS
Target hardware is a rather low-powered MCU (ARM Cortex-M3 @72MHz, with just about 64KB SRAM and 256KB flash), so walking the thin line here. My board does have ethernet, and I will eventually get ...
4
votes
2answers
141 views
Question about the SessionLock paper
Some time ago there was a big fuzz over Firesheep: by listening to wifi traffic your login session can be stolen which is very bad because now somebody can e.g. send emails on your behalf. Some people ...
5
votes
2answers
361 views
What is more secure: Many subdirectories, or many subdomains?
I have 3 websites that could be configured as a "VirtualApplication" in servicedefinition.csdef:
www.mydomain.net/enroll
www.mydomain.net/admin
www.mydomain.net/
... or I can configure them as a ...
5
votes
2answers
158 views
Complexity of web certificate attacks
I heard a while ago about someone exploiting md5 weaknesses to create a web certificate with the same md5 that a different certificate has.
They were able to create a certificate through bad issuing ...
18
votes
8answers
7k views
Can my company see what HTTPS sites I went to?
At work my company uses internet monitoring software (websense). I know if I visit a https ssl-encrypted site (such as https://secure.logmein.com) they can't see what I'm doing on the site since all ...
5
votes
1answer
630 views
Thunderbird - what happens if Gmail SSL cert gets spoofed?
I use a good MUA: Thunderbird [to read/reply to my emails on Gmail].
So: what happens, if i go to a place, where is public wifi, and someone tryes to sniff my password/username/emails?
Questions:
...
3
votes
3answers
901 views
sslstrip vs. privoxy redirect rule on clients
I watched this video: http://www.securitytube.net/video/193 Now I'm thinking about an example.
Suppose I have a privoxy proxy on my PC:
user.action file (just part of it):
{ ...
2
votes
1answer
1k views
How to find out if a connection encrypted?
I'm sniffing a connection that uses ICEP (ZeroC ICE Protocol), and its packet bodies compressed using BZ2 (GNU BZip 2) algorithm.
I want to find out whether packets encrypted, or not. ICEP can use ...
5
votes
6answers
706 views
Should the bit-strength selection of a child certificate be influenced by the CA or the chain?
All things being equal; suppose I have a CA chain that has 1024 bits of RSA encryption. Does this mean that my selection of a child CA or WebServer certificate gains no benefit from a higher level of ...
5
votes
3answers
3k views
What SSL key should I make for IIS: RSA or DH? What bit length is appropriate?
I'm creating an SSL cert for my IIS server and need to know when I should choose the Microsoft RSA SChannel Cryptographic Provider or the Microsoft DH SChannel Cryptographic Provider.
Question 1 Why ...
5
votes
5answers
1k views
Insecure Cookies Because of Load Balancer
I have a load balancer that terminates https requests to http and therefore my backend servers see them as http. As a result, all of my cookies are set without a secure flag when you view cookies on ...
9
votes
1answer
1k views
TLS replay attack - requirements of the serverHello nonce
As you all know, the SSL/TLS protocol requires both client and server to exchange (in clear text) a random number or nonce. This is presumably used to prevent replay attacks.
It is not clear to me ...
