Questions tagged [opportunistic-encryption]

Opportunistic encryption is optional encryption without a requirement of authentication, like STARTTLS in SMTP.

Filter by
Sorted by
Tagged with
0 votes
1 answer
231 views

Stolen Remote Desktop Protocol (RDP) credentials

I would like to know how to guard against RDP-renting services such as dedicateexpress.com which rents out stolen corporate laptops credentials. Are there IDS for such events?
BitsInForce's user avatar
1 vote
1 answer
527 views

Is opportunistic encryption support optional for HTTP/2?

I'm a little unclear on the subject of opportunistic encryption of the HTTP:// address scheme in HTTP/2. According to the bug report, it looks like it's kinda optional, and an afterthought: https://...
cnst's user avatar
  • 1,964
5 votes
2 answers
531 views

How can I enable opportunistic encryption for my web-site?

As per an honourable mention in an answer for « Why self-signed https is less trustworthy than unencrypted http? », it appears that there are already two post-Snowden drafts that have to do with the ...
cnst's user avatar
  • 1,964