Hot answers tagged

14

Because they're used differently. TLS/SSL x509 certificates as commonly used in HTTPS is used to connect to public systems, i.e. systems that are accessed by a large number of people, most of whom had no prior out-of-band connection with the owner of the system. SSH, on the other hand, are primarily used to access private systems by a small number of server ...


6

This is an awesome idea - to manually trace through the cert validation process! I've enjoyed reading through your steps, since I've never actually done it myself! Answering your questions: First question: Is this the correct way of obtaining the certificate the *.wikipedia.org certificate was signed with? After all, how can I be sure ẁikipedia.org didn'...


5

Running ssh -vvv host, at some point, you will see something like: debug1: Authentications that can continue: publickey,password debug3: start over, passed a different list publickey,password debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password The first two lines describe what methods are offered by the server and the ...


5

WhatsApp will re-encrypt the message with the new credentials bound to the same number and re-send it. WhatsApp protects from passive interception, but it does not protect against a man-in-the-middle or someone who hijacks the phone network. Sad, really. Ref: How WhatsApp Needs to Improve Its Encryption ss7 attack leaves whatsapp and telegram encryption ...


3

SSH actually requires you to configure different keys for different users. Each user account on the destination machine has its own ~/.ssh/authorized_keys (doesn't necessarily have to have, it might not exist). Let's assume you have server and client. server has users set up as follows: /home/srv_user01 /.ssh/authorized_keys ...


3

The main reason for this is that the asymmetric encryption algorithm used in the signing (RSA) cannot be used to encrypt large amount of data and it is extremely slow. In particular, RSA cannot encrypt data that is larger than its key size: RSA, as defined by PKCS#1, encrypts "messages" of limited size. With the commonly used "v1.5 padding" and a ...


3

A malicious user cannot exploit a publicly known fingerprint of a public key, because verification is not limited to comparing the fingerprint to a fixed value. Server presents two pieces of information to a client: a public key a message encrypted with its private key (which exists only on the legitimate server) On the client side the message is ...


2

For the purpose of authenticating a server to a connecting user, the difference in the implementation which you observed is not really a technical one. Particularly: SSL does not require the use of a trusted third partyーyou can use SSL with self-signed certificates (which would be equivalent of how SSH keys authentication works). SSH can use a server ...


2

They MAY use the same certificate for any *.domain.tld. However, the problem with bugs like heartbleed is that, in case you get hold of the private part of the certificate you are able to intercept (read / modify) any *.domain.tld SSL/TLS traffic and it doesn't really matter what the originally used certificate is (unless HPKP is enforced).


1

No. The authorized_keys file contains strictly only the public key, as described in the manual page for sshd: AUTHORIZED_KEYS FILE FORMAT Each line of the file contains one key (empty lines and lines starting with a ‘#’ are ignored as comments). [...] Protocol 2 public key consist of: options, keytype, base64-encoded key, comment. Accepting the ...


1

Your question about when / how to renew the CA key is a good one, but I'm afraid that it doesn't have a generic answer; it depends on which applications are consuming those certificates and how they expect a CA to behave as it approaches its end-of-life. One thing that is universally true is that end-entity certs should never outlive any CA in their issuing ...


1

Five years is a long time in Information Security. Ten years will see the security world decide that some algorithms and keys are too easily compromised. I have a client who had implemented SHA1 hashes in each tier in order to support unpatched Windows XP using a PKI environment that was built within the last four years. We had to rehash each CA's ...


1

If you have your publick key on key servers you can only share fingerprint, a link for download your public key is good if you haven't key on key servers or even when you have on key servers because maybe not all people use same key servers. I use fingerprint and also I have a link to my public key on my blog. gpg --recv-key ...


1

I'm assuming you're trying to deploy your own LDAP backed certificate service. The best matching schema for this purpose is the cosine schema available in all OpenLDAP installations. If you don't want to install the openldap server just to get the schema, then simply extract it from the source code here - http://www.openldap.org/software/download/ . The ...



Only top voted, non community-wiki answers of a minimum length are eligible