Linked Questions
318 questions linked to/from How does SSL/TLS work?
46
votes
2
answers
55k
views
What is the difference between a certificate and a private key?
What is the difference between a certificate and a private key?
In answering another question on this site, I wanted to point to a canonical answer to this question, but to my surprise I don't see ...
CommunityBot
- 1
3
votes
3
answers
2k
views
Is HTTPS over wifi still safe if a hacker can set up a rogue DHCP server?
I always heard that entering passwords or any sensitive information while using a public wifi spot is safe only when visiting an HTTPS website, ensuring that the URI and certificate are valid.
Many ...
- 1,746
94
votes
4
answers
87k
views
SSL Certificate framework 101: How does the browser verify the validity of a given server certificate?
(I have a basic understanding of public/private key, hashing, digital signatures... I have been searching online & stack forums last couple days but cannot seem to find a satisfactory answer.)
...
- 132k
0
votes
0
answers
68
views
What is the security impact of disabling certificate check [duplicate]
I have this line of code in a client server project:
sslContext.init(null, new TrustManager[]{new TrustAnyManager()}, null);
A security guy pointed out that this is skipping the validation of the ...
- 205k
0
votes
2
answers
742
views
Most secure way to pass data from client to server?
I'm writing an authentication system and would like some suggestions on improving its security. Currently, I use RSA to communicate data between the client and the server. Here's the process:
The ...
CommunityBot
- 1
1
vote
2
answers
71
views
Preventing Data Tampering in HTTPS Requests: Safeguarding User-Initiated Donations
Could a Man-in-the-Middle (MITM) attack compromise the integrity of user-initiated transactions over HTTPS? Specifically, if a user selects an amount to donate on a website, is it possible for a ...
- 17.4k
4
votes
2
answers
846
views
securely tunneling through a MITM proxy
I am wondering if there is a practical way to establish a secure, encrypted network connection through an MITM proxy given the ability to communicate secrets out-of-band with a second, external proxy. ...
- 205k
1
vote
2
answers
2k
views
Going from an EC Private Key to Decrypting Traffic
At the moment I have an EC private key in my possession and also some traffic that was encrypted using the aforementioned private key. I have been trying to use OpenSSL to turn the private key into ...
- 101
0
votes
1
answer
158
views
Detect invalid cert Android client if URL being redirected to a fake server [duplicate]
Here is the scenario:
Server A is an authentic server (A.com).
Server F is a fake server (F.com) that also has a valid cert for
F.com has a copy of A.com certificate to it (to fake as A.com).
Client ...
- 50.3k
0
votes
1
answer
1k
views
How do TLS clients validate intermediate CA certificates?
I have read many posts related to the intermediate CA certificates and I do hope my question is not a duplication.
Where do TLS clients fetch intermediate CA certificates from?
In SSL server handshake,...
- 205k
3
votes
3
answers
6k
views
Single Domain SSL Certificate vs Wildcard Certificate
Probably a rather odd question, but something that came to mind.
Wildcard certificates are about 10 times more expensive than a single certificate. However with a single certificate, you can secure ...
0
votes
1
answer
122
views
Man in the middle attack on response from server [duplicate]
Let's assume that I am logging into my Gmail account from my browser using my username and password. I know that my input will be encrypted using Google's private key and the only one who can decrypt ...
- 132k
0
votes
2
answers
5k
views
Obtaining .p12 certificate from PEM file and CRT file provided by GoDaddy
A few months ago a colleague who left generated a CA certificate from GoDaddy. I am not sure the exact steps he took but currently we would like to install the CA certificate on a server to fully ...
- 487
0
votes
1
answer
8k
views
ssl handshake failure unable to get local issuer certificate
I have an issue with new integration that I am working on it.
I should consume a web service provided by external company and this service is over https, so in order to integrate with them, they have ...
CommunityBot
- 1
0
votes
0
answers
21
views
How does client data encryption work in HTTPS? [duplicate]
When you connect to a HTTPS server the server encrypts its data using the private key of its private certificate. The client decrypts it using the server's public key of the server's public ...
- 145