The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [certificates]

A piece of data used in public key cryptography (specifically public key infrastructures) that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate. For questions specifically about [x509], [certificate-authority], or [public-key-infrastructure], please use those tags.

Filter by
Sorted by
Tagged with
-1
votes
2answers
50 views

technical difference between TLS and a certificate [duplicate]

I don't quite understand what the difference is between TLS and a certificate. TLS secures the transmission by encrypting the data. So normally no man in the middle attack is possible and nobody else ...
-1
votes
1answer
74 views

tls custom system trusted certificate on android6 not working [closed]

I encounter the same problem as the user has in this post: Why does Samsung Android browser say our site has a valid certificate, but the site identity has not been verified? The accepted answer is: ...
-1
votes
1answer
104 views

SHA-1 Certificate warning on Windows7

I have installed a clean Win7 machine on a network where my own PC is connected. When I navigate to google.com from my PC (Win 8.1) I receive proper valid TLS connection. Yet when I navigate to google....
-1
votes
1answer
36 views

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background, will this change the Lock-Logo in the Browser Address bar? Does an address based ...
-1
votes
1answer
2k views

How does SSL client authentication work?

I read the RFC document, it mentioned that there are some kinds of client certificate type. So I don't understand what does this type mean. For a instance, one type named rsa_fixed_ecdh, it said, the ...
-2
votes
1answer
163 views

Is there a fix to the ongoing security issues with ssl / tls? [closed]

Seems like the methods we use to ensure secure information exchange with servers continually fail. Given the ongoing issues with SSL / TLS and the ever changing methods to fix issues such as: HTTP ...
-2
votes
1answer
76 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
-2
votes
2answers
6k views

How do you fix this error in IE: “The security certificate presented by this website was issued for a different website's address.” [closed]

I've searched for an answer for two days, I feel none even knows what the error really means. I have an Issuing Certificate Authority and it has one valid certificate, and I want users to access its ...
-2
votes
1answer
572 views

Wget cannot securely connect to web.archive: self-signed certificate encountered [closed]

I wanted to get a few files from https://web.archive.org with wget, but it's throwing a self-signed certificate encountered error. I'm connecting through my phone directly to the mobile network so I ...
-2
votes
1answer
369 views

How do I detect if the public key in a digital certificate is modified?

I know how the basic process of digital certificate, but how do I detect if the public key in a digital certificate is modified?
-2
votes
1answer
55 views

Where to find required information to lodge a security certificate? [closed]

This is Bob's current understanding about security certificates: Security certificates are required for SSL communication. If you want to take part in SSL communication you have buy a certificate ...
-2
votes
1answer
3k views

How to dnsspoof against HTTPS

I am doing a dnsspoof PoC, but apparently it doesn't work with HTTPS because of the certificate. Please don't tell me that I have to generate a certificate or send a legitimate certificate, I want ...
-2
votes
1answer
118 views

Can OCSP stapling reduce or eliminate the weaknesses inherrent with OCSP? [closed]

Specifically, the problems with OCSP that Adam Langley talks about here?
-2
votes
1answer
89 views

Create public key from Private key

Is it possible to create public key from Private key? In Microsoft certificate console (Capi) you can export a certificate out of a private key. Is this exported certificate a public key? I know that ...
-2
votes
1answer
1k views

Does a third level domain wildcard certificate prove a fourth level domain website? [duplicate]

Suppose I have a certificate for *.example.com and privileged access to all example.com websites. Sure I could install the wildcard certificate into https://api.example.com website so that it can ...
-2
votes
1answer
373 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
-2
votes
1answer
496 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...
-2
votes
3answers
224 views

Can a website that uses https be absolutely reliable? [duplicate]

Https websites cover some security requirements and certify the author, but how can we be sure that an author of such an https website is not malicious?
-3
votes
1answer
86 views

what is the maximum life-time for Let's Encrypt certificates

Let's Encrypt is one of the most popular TLS Certificate Authorities. I have conflicting information about its certificates life-time. In this link it says 90-days. In one research paper I read 1 ...
-3
votes
2answers
134 views

TLS Verification does NOT fail although the CA root is NOT set in IE

As far as I know: when we make an ssl connection to a site we receive the site certificate, the browser check if the site certificate is in its list of root and trusted certification. So if the CA is ...
-3
votes
1answer
87 views

How two identical domains work on Internet when they got signed from two different CA

Let's say A and B. Considering A and B are from same location. A went to the verisign and get signed for example.com B went to the godaddy.com and get signed for same domain(example.com) Now question ...
-4
votes
2answers
441 views

Using my own encryption instead of https in app

I am writing a program that uses a webserver as a backend for communication between different users. Is it okay to use my own encryption (such as http://www.logikdev.com/2010/11/01/encrypt-with-php-...
-4
votes
1answer
258 views

Illegal Russian Forums [closed]

I recently found this link hxxps://maza.cc:888 and it was saying No required SSL certificate was sent. How can I bypass to see the content on this site?
-4
votes
2answers
172 views

Does SSL doesn't work without a secondary Symmetric/Asymmetric session key?

I keep reading that Symmetric session key is used in SSL after handshake only for faster performance but isn't true a secondary session key either Symmetric or Asymmetric key generated by the client ...
-5
votes
3answers
855 views

PHP web application security [closed]

I am building a PHP web application, that needs enhanced security, due to the fact that it contains very sensitive information (in a database). I think that I want to use self-signed SSL ...
-6
votes
4answers
741 views

Is TLS-in-TLS supported in any software? Does it make sense? [closed]

I got fun idea how to increase the security of the SSL (TLS) for websites. However I think there is no support for it in the browsers, so I thought I could add it eventually, but have no idea if it's ...