SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

learn more… | top users | synonyms (2)

-1
votes
1answer
206 views

How secure are the new TLDs ( .us, .io, …) and do they compare to .com? [closed]

The introduction of the new top level domains (TLDs) such as .music, .books, etc. will increase the number of people and organisations adding and removing entries into the root DNS servers (.) for ...
-1
votes
2answers
88 views

What happens when and attacker changes the installed public keys in browser

I was reading about SSL. I understood that each browser comes with a predefined set of known public keys,which is then used to authenticate the messages. I was wondering what will happen when a virus ...
-1
votes
2answers
343 views

Is SSL needed for connecting to my DVR System?

I was wondering if SSL is necessary to connect to my DVR System, by default, which can't be changed, I can connect to my DVR System with the help of dyndns.com. But going to the domain doesn't show ...
-1
votes
1answer
342 views

RC4-MD5 vs DES-CBC3-SHA [closed]

We moved to RC4-MD5 as a mitigation to BEAST attack. But our other teams are saying to use DES-CBC3-SHA I want to know if DES-CBC3-SHA is also equivalent secure and mitigates BEAST as well ? Also ...
-1
votes
1answer
2k views

Why IE/Windows forces you to install self-signed certificates as root CA to make them work?

In old versions of IE/Windows you could install a self-signed certificate for a web site and it just worked: the warnings disappeared. In more recent versions (and with Chrome) this just didn't work. ...
-1
votes
1answer
117 views

XER encoded X.509 certs [closed]

Would anyone happen to have an example of an XER encoded X.509 certificate so I can play around with it? Thanks!
-1
votes
1answer
62 views

Protocols equivalent to TLS? [closed]

Are there any protocols equivalent to TLS that are widely used, or the TLS is the most, worldwide used protocol to secure almost all the traffic available in the network?
-1
votes
1answer
109 views

Would PGP/GPG have been a better choice than SSL for browsers and http servers to encrypt traffic? [closed]

I was curious recently when I heard that SSL had supposedly been broken by a certain rogue government agency, why SSL was chosen in the first place. Could it be that PGP would have been a more secure ...
-1
votes
1answer
291 views

Wireshark Decode HTTPS Root Certificate

I'm currently dealing with a "Sniffy" java application. Well I can see it connecting to some kind of server using HTTPS. I would like to see what its sending or getting over HTTPS. i have read some ...
-1
votes
1answer
55 views

An indian government website is not secure [on hold]

We know the news about fake SSL certificates issued by Indian government agency. This site http://www.passport.gov.in/nri/Online.do does gather confidential information as you can see. The site ...
-1
votes
1answer
73 views

How does SSL client authentication work?

I read the RFC document, it mentioned that there are some kinds of client certificate type. So I don't understand what does this type mean. For a instance, one type named rsa_fixed_ecdh, it said, the ...
-1
votes
1answer
305 views

What is HeartBleed? [duplicate]

Today when I woke up , I got a email from Godaddy that contain “A critical vulnerability with OpenSSL, known as 'The Heartbleed Bug' was recently announced that could potentially impact your server“ ...
-1
votes
1answer
383 views

MITM Attacks over SSL [duplicate]

Possible Duplicate: How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption? If I have a server (call it server 1) set up to receive ...
-1
votes
1answer
98 views

Why are there soo many HTTP connections when using Convergence?

I installed Convergence on Firefox 9.0.1: http://convergence.io/ but... after I installed/enabled it when I visit a HTTPS only-site there are many-many HTTP traffic to the notary servers. Why? ...
-2
votes
1answer
644 views

Are GET parameters secure over https? [duplicate]

Since GET parameters are passed in the url, how can they be secure from someone with access to network logs. He would be able to see what urls are accessed, even if he cannot see the request and ...
-2
votes
1answer
155 views

What mode of operation is secure for block ciphers?

as RC4 is not secure and AES-CBC is same thing the only solution is using EAX mode for AES. but why mozilla NSS don't support EAX mod ? is there any secure EAX implementation ? and why wikipedia says ...
-2
votes
2answers
1k views

Hydra https-form-post

I have never experimented much with online password crackers. I attempted to use Hydra today on this website www.athena2.harker.org and I keep getting false positives. This is what I have done so ...
-2
votes
1answer
53 views

Website data security using HTTPS / ELGAMAL [duplicate]

Is using the "HTTPS" protocol is enough for website data security, or should I use another encryption algorithm (Elgamal, RSA or something else) as well? Does the BREACH attack described here affect ...
-2
votes
1answer
45 views

Can OCSP stapling reduce or eliminate the weaknesses inherrent with OCSP? [closed]

Specifically, the problems with OCSP that Adam Langley talks about here?
-2
votes
3answers
69 views

Does HTTPS retrieval, among its other effects, sign a document? [duplicate]

Does HTTPS retrieval, among its other effects, sign a document? I'm asking in hopes of understanding in more specific details what TLS accomplishes. I will try to elaborate my question, as follows. ...
-2
votes
2answers
106 views

the possibility of man in the middle attack [closed]

when was the possibilty to perform man in the middle attack on ssl? is it possible to perform with out session between client and server? can you explain MITM?
-3
votes
1answer
187 views

Different AES 256 algorithms produce different results?

I've tried 3 AES 256-bit CBC encryption programs, and I seem to be getting different results for each one with the same 32-character password, which consists of all @ signs. They are: Polaris SSL ...
-3
votes
2answers
161 views

NSA and facebook chats [duplicate]

Can you guess how the NSA can read Facebook chats, while Facebook does use SSL encryption? Requesting information directly from the Facebook HQ is possible (see also who betrayed Facebook in favor of ...
-3
votes
2answers
310 views

Cannot use HTTPS or download stuff from sourceforge with a mac, what kind of soft does that? [closed]

I'm at a public library (france). I have a http library login to access that wifi. I just want to download some SFML zip to make some app, but many things are blocked, mainly https. I can't even ...
-3
votes
1answer
99 views

What are the risks if a weak ciphers are accepted by a technology that uses SSL

The TLSSLed tool found that the host that I use has SSL connection that accepts 8 different TLSv1 and SSLv3 ciphers that are weak by their length (40 bits). How can an attacker exploit this fact?
-5
votes
4answers
283 views

Is TLS-in-TLS supported in any software? Does it make sense? [closed]

I got fun idea how to increase the security of the SSL (TLS) for websites. However I think there is no support for it in the browsers, so I thought I could add it eventually, but have no idea if it's ...
-5
votes
2answers
30 views

how do vpns secure the encyption key? [on hold]

VPNs are accessed by the user with credentials so that the information is encrypted. There are credentials that you download to allow this. Since you don't physically, in person get the credentials ...
-5
votes
1answer
91 views

How to decrypt the encrypted data, in SHA256, of mysql database? [closed]

I have some data in column of table of mysql database in the encrypted form applied with SHA-256. How to decrypt that data using Java. I stuck at this since 4 days. Please spend 5 minutes of your ...