Linked Questions

4 votes
2 answers
579 views

securely tunneling through a MITM proxy

I am wondering if there is a practical way to establish a secure, encrypted network connection through an MITM proxy given the ability to communicate secrets out-of-band with a second, external proxy. ...
1 vote
2 answers
2k views

Going from an EC Private Key to Decrypting Traffic

At the moment I have an EC private key in my possession and also some traffic that was encrypted using the aforementioned private key. I have been trying to use OpenSSL to turn the private key into ...
0 votes
2 answers
347 views

Most secure way to pass data from client to server?

I'm writing an authentication system and would like some suggestions on improving its security. Currently, I use RSA to communicate data between the client and the server. Here's the process: The ...
43 votes
2 answers
47k views

What is the difference between a certificate and a private key?

What is the difference between a certificate and a private key? In answering another question on this site, I wanted to point to a canonical answer to this question, but to my surprise I don't see ...
0 votes
1 answer
90 views

Detect invalid cert Android client if URL being redirected to a fake server [duplicate]

Here is the scenario: Server A is an authentic server (A.com). Server F is a fake server (F.com) that also has a valid cert for F.com has a copy of A.com certificate to it (to fake as A.com). Client ...
0 votes
1 answer
310 views

How do TLS clients validate intermediate CA certificates?

I have read many posts related to the intermediate CA certificates and I do hope my question is not a duplication. Where do TLS clients fetch intermediate CA certificates from? In SSL server handshake,...
3 votes
3 answers
6k views

Single Domain SSL Certificate vs Wildcard Certificate

Probably a rather odd question, but something that came to mind. Wildcard certificates are about 10 times more expensive than a single certificate. However with a single certificate, you can secure ...
0 votes
1 answer
94 views

Man in the middle attack on response from server [duplicate]

Let's assume that I am logging into my Gmail account from my browser using my username and password. I know that my input will be encrypted using Google's private key and the only one who can decrypt ...
0 votes
2 answers
4k views

Obtaining .p12 certificate from PEM file and CRT file provided by GoDaddy

A few months ago a colleague who left generated a CA certificate from GoDaddy. I am not sure the exact steps he took but currently we would like to install the CA certificate on a server to fully ...
0 votes
1 answer
8k views

ssl handshake failure unable to get local issuer certificate

I have an issue with new integration that I am working on it. I should consume a web service provided by external company and this service is over https, so in order to integrate with them, they have ...
0 votes
0 answers
21 views

How does client data encryption work in HTTPS? [duplicate]

When you connect to a HTTPS server the server encrypts its data using the private key of its private certificate. The client decrypts it using the server's public key of the server's public ...
0 votes
2 answers
787 views

Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?

If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
0 votes
1 answer
2k views

How do SSL/TLS certificates work? [duplicate]

I'm trying to understand how SSL/TLS certificates work, but I'm missing something. I have obtained my current understanding from this website: http://www.moserware.com/2009/06/first-few-milliseconds-...
0 votes
0 answers
28 views

Which Keys TLS uses? [duplicate]

I know that in TLS 1.2 the client generates PMS (Pre Master Secret) which is used to get master_secret and Key_Block. Where Key_Block combined with clinet_random and server_random gives us: clientMAC, ...
1 vote
3 answers
1k views

How to enforce confidentiality while keeping the authenticity?

Below is an illustration of the digital signing process. According to Wikipedia: A digital signature is an authentication mechanism that enables the creator of the message to attach a code that ...

15 30 50 per page
1
2 3 4 5
22