Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

11 votes
2 answers
2k views

Is compression mandatory with TLS?

1 vote
0 answers
173 views

Setup local Certificate Authority & integrate with SCEP

8 votes
2 answers
3k views

What is the exact difference between regular OCSP and OCSP stapling?

1 vote
2 answers
74 views

Why would a company choose to use different SSL providers for different subdomains

42 votes
3 answers
9k views

Reasons to distrust Let's Encrypt certificates

1 vote
0 answers
26 views

mTLS on webhooks

56 votes
8 answers
117k views

Why are self signed certificates not trusted and is there a way to make them trusted?

1 vote
2 answers
103 views

Is it OK to use client TLS certificate for site login instead of username/password?

0 votes
1 answer
32 views

SSTP VPN security feature

0 votes
2 answers
64 views

Could certificate pinning work if one checks the intermediate certificate when the leaf certificate already expired?

18 votes
2 answers
4k views

Why doesn't a TLS certificate with a domain name mask that doesn't match the site name trigger a warning in the browser?

1 vote
1 answer
474 views

How secure is SSL private key in AWS ELB service?

2 votes
2 answers
2k views

Session ID in the very First Client Hello

1 vote
1 answer
82 views

Host header is preferred by OpenSSL over SNI

Browse more Questions