Hot answers tagged

5

Both documents intend to prohibit the use of the respective protocol and use the same RFC 2119 as a reference for terminology. RFC 7658 (the one titled "Deprecating...") specifically says: Security Considerations This entire document aims to improve security by prohibiting the use of a protocol that is not secure. Both documents were ...


4

As @techraf and @josef commented, all DDoS providers have the same challenges: To effectively identify DDoS traffic, a mitigation provider needs to be connected inside your encryption termination point, or at least be a Man In the Middle. Your concern regarding CloudFlare is the same concern you should have with them all. If you want DDoS mitigation, ...


4

["Facebook" here is just "an example of someone that wants a certificate." There is no inherent special Facebookness about this situation.] Who generated that public key that I can see in facebook certificate? Is it generated by Facebook or that intermediary CA? Facebook generates the "keypair" consisting of a public key and a private key. ...


3

It is not possible to "trick" the server, but there are a couple of caveats here. First, it is still possible to set up another site in IIS with a binding that will accept HTTP requests, so you need to be aware of the configuration of any other sites hosted on this server. Second, this configuration means that if people attempt to visit the site ...


2

Normally, there will be no warning as the certificate is signed by a trusted CA. Wrong. Since the subject of the certificate ( www.randomname.com) does not match the URL (www.google.com) the validation will fail and the browser complain. It does not matter if this is "only" a redirect, i.e. even for the domain you redirect from you need a proper ...


2

No - if there is no http binding, IIS will not accept an HTTP request. On 443, it will attempt to negotiate a TLS/SSL (depending on configuration) connection, if it cannot, the connection will fail. https://msdn.microsoft.com/en-us/library/ff720335.aspx Relevant quote : " By enabling SSL in Microsoft® Internet Information Services (IIS) 7.5/7.0, the [...


1

It's the state of the encryption. The pending state includes new encryption keys, and initialization vectors. There is a write key for sending data, and a read key for receiving data. The state of the keys and resulting IVs are the read and write states. So when the current read/write state is overwritten with the pending read/write state it means that ...


1

Lee Brotherston spoke at DerbyCon 2015 on Stealthier Attacks and Smarter Defending with TLS Fingerprinting -- slides -- video. He also released code to go along with the talk -- https://github.com/LeeBrotherston/tls-fingerprinting/tree/master/fingerprintls The below is taken from his website -- http://blog.squarelemon.com/tls-fingerprinting/ Transport ...


1

Thomas Pornin's answer is good, but a little outdated. Support for Name Constraints is growing. I've found that OpenSSL 1.0.1k and Windows 7 support the extension. Test Using XCA, I created a self-signed CA certificate, and added a critical Name Constraints extension for .lab.example.com, by adding the following line on the "Advanced" tab during ...


1

When we talk about security, self-signed and CA signed certificates are providing same 256-bit encryption to your website. But, SSL is not only used for security, but also refer authentication and users trust. Drawbacks of Self-Signed Certificate, Self-signed certificate and signed certificate carry equal encryption strength but beside this encryption, ...


1

As you already noted, there are two ways to exchange symmetric session keys: through key encipherment or through key agreement (which is based on Diffie-Hellman algorithm). Both algorithms are not used at the same time. For example, Microsoft SChannel client reads bits from server certificate's KeyUsages extension (which is a bit string) and depending on ...


1

This type of attacks is a legit threat. It can be easily implemented by tools like EvilGrade ( evil upgrade). Many softwares still perform update via HTTP. Example Scenario: Lets say a user has notepad++ installed on his PC.An attacker who has access to internal DNS can perform DNS cache poisoning and use a tool like Evil Grade. To put in simple words, it ...


1

For a man in the middle it is easy to tamper with a download. There are even metasploit modules which make it really easy to infect a downloaded executable on the fly. And man in the middle can be easily achieved too, for example by redirecting traffic inside a local network with ARP or DHCP spoofing, by controlling your own local network by creating an ...


1

Root certificates don't need to be revoked if they are not compromised. Obviously it's not possible to just create a CRL as there would not be a trusted private key; instead this is a out-of-order operation. In general it's better to create a new root certificate and let the old one expire. Note that the underlying certificates should have an expiration ...


1

(1) Does the verification of the chain end there or does it continue on until we get to D? it depends on a certificate chaining engine (CCE) implementation. Different platforms have different implementations which may not support all recommended/mandatory validation logic described in RFC5280. Certificate trust requires an end of chain point which is ...


1

The JDK is offered over HTTP because they also offer a hash for you to confirm over secure channels. Since the hash is over a secure channel, if that hash can't be confirmed you shouldn't use the download. The fact that the part of truth(the hash you check against) is delivered securely means they can offer it over HTTP because you will be able to securely ...


1

AFAIK, some of them are in countries, where single entity (gov) can covertly do whatever it wants on their machines. Yes, pretty many countries are like that today. Sadly, concerning governments, the CA system is not (and never was) secure. CAs are still good for preventing some people and organisations from attacking, just not all.



Only top voted, non community-wiki answers of a minimum length are eligible