Tag Info

New answers tagged

0

You can't get a nice notification to the user without establishing the TLS connection first. This means that your server or some middlebox (load balancer) in between must still be able to talk TLS 1.0. But you then could then check the protocol version of the client inside your web application and show the nice notification there. But, if and how this can be ...


0

A good load balancer, such as a Citrix Netscaler can offload SSL and redirect traffic based on the ability to encrypt or redirect according to what is minimally acceptable.


0

There are a couple of potential risks here, depending on how exactly this is setup and what the requirements are. If end users can obtain direct access to layer red and can obtain valid credentials, they then have unfettered access to layer red using only those credentials, skipping the auth check on layer blue completely. If layer blue only exists as ...


1

When I googled the query, I received many similar requests reported as malicious on different websites (like this one). This certainly looks like an XSS attempt. However, I don't think there's anything to worry about this particular request. The code: ...


1

It sounds to me like you need to configure the Tomcat service to request a client side certificate for authentication. I'm wise in the ways of IIS, but unfortunately Tomcat is not my forte. DO NOT give the admin of Tomcat your CSR. I recommend referencing Configure SSL Mutual (Two-way) Authentication Ideally you would use your internal CA to sign a ...



Top 50 recent answers are included