Linked Questions
28 questions linked to/from Does an established HTTPS connection mean a line is really secure?
3
votes
1
answer
5k
views
Is HTTPS secure enough for important information? [duplicate]
Possible Duplicate:
Does an established ssl connection mean a line is really secure
For example, Amazon.com doesn't use HTTPS for the whole site, but only the login page.
I know they are ...
- 183
-3
votes
2
answers
862
views
Is "HTTPS" ~100% secure? [duplicate]
Assuming that we have a "green bar connection" to a website, e.g.:
Is an attacker still able to sniff our traffic?
How secure is a user from man-in-the-middle attacks when he has established a "...
- 3,253
5
votes
1
answer
649
views
How secure is a https website? [duplicate]
Possible Duplicate:
Does an established ssl connection mean a line is really secure
When I visit a website -- say, https://ebanking.pick-your-bank.com -- my browser (fully patched version of ...
- 1,247
2
votes
1
answer
885
views
Is TLS enough to prevent eavesdropping? [duplicate]
Is it enough to use only SSL/TLS for client-server application with authentication, registration and data transmission (like chat)? If it is not what I also need to use?
-2
votes
1
answer
165
views
Website data security using HTTPS / ELGAMAL [duplicate]
Is using the "HTTPS" protocol is enough for website data security, or should I use another encryption algorithm (Elgamal, RSA or something else) as well?
Does the BREACH attack described here affect ...
- 1
1
vote
0
answers
57
views
SSL Asymmetric encryption newbie [duplicate]
I am relatively new to the world of cryptography and was wanting to develop a webpage which allows credit card payments. Thus, I looked into the digicert ssl service, hoping that it could do what I ...
- 11
1249
votes
3
answers
663k
views
How does SSL/TLS work?
How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering.
I'd like to see details in terms of:
A high level description of the protocol.
...
- 131k
360
votes
6
answers
320k
views
What is certificate pinning?
I'm superficially familiar with SSL and what certs do. Recently I saw some discussion on cert pinning but there wasn't a definition. A DDG search didn't turn up anything useful. What is certificate ...
- 3,725
90
votes
12
answers
17k
views
How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
This question has been revised & clarified significantly since the original version.
If we look at each trusted certificate in my Trusted Root store, how much should I trust them?
What factors ...
- 50k
63
votes
4
answers
18k
views
Why aren't application downloads routinely done over HTTPS?
We all know we should be using SSL whenever we collect passwords or other sensitive information. SSL provides two main benefits:
Encryption: The data can't be read by a middle-man while in transit.
...
- 3,252
33
votes
9
answers
12k
views
Can a HTTPS connection be compromised because of a rogue DNS server
If I'm visiting (just a desktop PC, client side) a site that has a valid HTTPS cert/connection, that can it be compromised if I'm using a rogue DNS server (not deliberately, I'm concerned about an ...
- 6,109
36
votes
6
answers
29k
views
Where to get an SSL certificate for personal website?
I would like to use https to login to my personal webpage (which is on shared hosting). So I went over to google and started searching for sollutions. Eventualy I found out that I need an SSL ...
- 3,262
27
votes
6
answers
7k
views
What security risks does IP spoofing bring?
By manipulating the TCP packet and changing the source address one is able to spoof the IP. As I understand it, you will not be able to set up a full handshake by doing this, as you will never receive ...
- 16.1k
14
votes
5
answers
93k
views
How safe is the 256-bit encryption used in bank transactions?
Most of the banks use a 128-bit or 256-bit encryption. What does this mean? Does it mean that the keys used in SSL are 128-bit long or what?
If they are the SSL key lengths then 128 bit RSA keys are ...
- 1,587
14
votes
5
answers
10k
views
SSL Inspection and privacy
I know my company is testing something called "SSL Inspection" based on Websense, which is our proxy. I can not provide more detail about this, but does this mean that in principle all my SSL traffic, ...
- 243