Questions tagged [tls]

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

Filter by
Sorted by
Tagged with
1 vote
0 answers
26 views

What damage can a malicious wifi hotspot cause? [duplicate]

I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN. That seems strange ...
0 votes
1 answer
21 views

SSTP VPN security feature

Do we know exactly whether and for which parts of the packet confidentiality and integrity properties are guaranteed using SSTP VPN? Specifically confidentiality is enforced on the header of the ...
0 votes
0 answers
10 views

How can I add secure DNS (DoH) to Windows settings before Windows makes any connections to the Internet during installation? [migrated]

Is there a way I can add DNS over HTTPS details to Windows settings before it makes the first connection to the Internet during installation? I'm using the latest version of Windows 11. Either by ...
0 votes
2 answers
61 views

Could certificate pinning work if one checks the intermediate certificate when the leaf certificate already expired?

I have the following scenario: When the leaf certificate expires, the intermediate certificate is checked and if the intermediate is not expired, the application will keep running and will not be ...
18 votes
2 answers
4k views

Why doesn't a TLS certificate with a domain name mask that doesn't match the site name trigger a warning in the browser?

I visited stackoverflow.com and found in Chrome that its certificate is valid and has Common Name (CN) *.stackexchange.com. After that I checked a fingerprint for stackexchange.com and it matched ...
1 vote
1 answer
474 views

How secure is SSL private key in AWS ELB service?

We host a cluster of microservices on AWS. The cluster has a public-facing gateway that uses an Elastic Load Balancer to terminate SSL traffic. The certificate is issued by AWS Certificate Manager (...
0 votes
0 answers
15 views

Should you compress the body of a HTTP(S) response before passing it to openssl? C++ [duplicate]

Should you compress the body of a HTTPS response before passing it to openssl? C++ I am aware of the attacks that are made possible by compressing a HTTP(s) response as explained over here. But ...
2 votes
2 answers
2k views

Session ID in the very First Client Hello

Is it normal to have Session ID in the first Client Hello, and then the server picks it up and accepts the same Session ID and uses it in all further TLS traffic. That is the "Client or Browser" tells ...
1 vote
1 answer
74 views

Host header is preferred by OpenSSL over SNI

As I understand a webserver shall serve SNI first and ignore HOST header from HTTP 1.1 as TLS handshakes occurs before HTTPS, to test I came up with this example: two domain names under the same IP ...
1 vote
0 answers
27 views

Fragmentation in TLS

I have a question related to the correct interpretation of RFC 5246 (TLS v1.2), in particular concerning the fragmentation in the record layer. "6.2 Record Layer" states that the record ...
0 votes
0 answers
10 views

How to View HTTP(S) Headers sent FROM tinyproxy [closed]

The main pursuit of this post is to find a way to view the HTTP(S) Headers that are outgoing from my open source proxy server, Tinyproxy. I would like to accomplish this with PHP if possible, but will ...
1 vote
2 answers
55 views

Is it a good idea to reuse certificate issued by public CA for internal database client authentication?

Let's say we have: Publicly available HTTPS API (e.g. api.example.com). The web server that runs it uses a certificate from a publicly trusted CA (e.g. Let's Encrypt) with both server auth and client ...
0 votes
0 answers
31 views

How does Certificate Transparency protect from hacked CA server [duplicate]

I was able to grasp how CT works by reading this explanation, but one thing remains unclear for me - how CT may protect ecosystem from hacked CA server. For example, someone hacked Digicert, and now ...
0 votes
0 answers
38 views

Do I need https for a web server that will be used locally? [duplicate]

I have a web server that will be used to manage the stock of a warehouse in a factory. The web server will be accessed only locally so the clients can update and view the available stock. The server ...
2 votes
2 answers
8k views

HSTS doesn't work on browser when dealing with a self-signed certificate

We have a web portal and I need to add HSTS header in the response. Ours is an on-premise solution, so we use a self-signed certificate. I have added the hsts header in the response & I need to ...
0 votes
0 answers
24 views

How to configure server for client certificate authentication?

I have seen some service providers that use certificates for client authentication, so that any browser without the certificate will be rejected. However, the browsers with trusted certificates could ...
9 votes
2 answers
14k views

Which extensions to use for a S/MIME certificate?

Analogously to the SSL server certificate question, which extensions should I use for S/MIME, and should the CA be restricted somehow as well? (I'm using openssl, which at the moment creates CA and ...
1 vote
1 answer
4k views

TLS interception on an Android phone

Here are the steps I've been through until I hit a problem. I have a website that runs on an HTTPS protocol serving the Android application I generally debug requests / responses via Wireshark ...
0 votes
2 answers
106 views

Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?

If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
2 votes
1 answer
107 views

How do I ship my SSL keys with my application?

I have an executable, and I have the SSL certificates and keys necessary to establish the secure connection. The application performs self-updating by downloading and replacing itself with an updated ...
2 votes
0 answers
44 views

With TLS 1.3 is it possible to conduct the handshake on a separate device from where the main channel is?

With TLS 1.3 a PSK is established along with main secrets for the encrypted channel. Can this mechanism be employed to allow client authentication to occur on one device (say a mobile device), which ...
56 votes
8 answers
116k views

Why are self signed certificates not trusted and is there a way to make them trusted?

I have locally made a Root CA certificate. I used the CA cert to sign the IA cert and used the IA cert to sign the server certificate. When I try to access the local server which uses the server ...
0 votes
1 answer
67 views

TLS 1.3 client communicating with TLS 1.2 server

I am testing TLS 1.3 for my application. Can a TLS 1.3 enabled client communicate with a TLS 1.2 enabled server? If yes, what should be the record layer for the initial client hello? Currently, I am ...
0 votes
0 answers
6 views

Prevent users from ignoring certificate warnings [migrated]

Is it possible to prevent users to bypass a certificate warning showed in their browser, and if so, how? Assuming we have no control on the remote server, and total control on the client computer.
0 votes
1 answer
33 views

CA-signed certificate for localhost / production app

I have developed an application that consists of various parts, each part communicating either via http and / or gRPC to one another. All communication has been switched over to TLS using a self-...
0 votes
0 answers
29 views

TLS 1.3 Handshake issue - client is tls 1.3 enabled and server is tls 1.2 enabled [duplicate]

I am using a TLS 1.3 enabled server (windows 2022) as the client (running my application on the server) and trying to communicate with a 2012 Windows server that is TLS 1.2 enabled. The initial client ...
1 vote
2 answers
52 views

Do CloudFront edges talk to custom origins over open (non-AWS) networks?

Where the custom origin server for an AWS CloudFront distribution is an EC2 instance accessible with a public DNS record, do CloudFront edge locations talk to it over the open Internet — as opposed to ...
8 votes
6 answers
9k views

How can I know that the CA certificates in my computer have not been spoofed?

As far as I know, the browser contains the certificates of several CA. When I access http://gmail.com, the site says it is Gmail, it exposes a certificate signed by one of the CA I have in my ...
3 votes
1 answer
1k views

Can we add TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 on windows server 2012 using gpedit although not supported by windows OS by default?

We are using IIS on Windows 2012-R2 server to host dotnet apps. From the app, when we try connecting to an external 3rd party api we see TLS handshake failure. On running ssllabs test on that api, I ...
0 votes
2 answers
25 views

Does send HTTP requests as signed tokens make sense when mutual TLS is used?

When we use mTLS, then client and server are authenticated. In this scenario, does it make any sense to send HTTP requests in signed tokens (like JWS)?
9 votes
3 answers
5k views

Adding custom data in X.509 certificate

I am using SSL with client authentication. I need to send some extra data while sending the client certificate? Can I send it in the certificate? Can I use the extension fields in certificate for that ...
0 votes
2 answers
116 views

What's the best way to "witness" TLS in action between two communicating services over a network?

So let's say you have setup TLS between two different services. And you want to "prove" that out (for lack of better words. Basically just trying to witness the encrypted traffic in action). ...
0 votes
0 answers
32 views

OCSP Must-Staple test website?

I'm interested in the status of OCSP respect in modern browsers (particularly the one I'm using right now). Is there any website that will allow me to test how my browser treats the status_request ...
0 votes
0 answers
60 views

How to PoC the CVE-2015-4000 logjam vulnerability

I ran testssl.sh on a server and can see that it is vulenrable to logjam. Now I am interested in doing a PoC to validate the server is exploitable to this vulenrability. I searched through google but ...
0 votes
0 answers
65 views

SSL VPN packet structure

What is the exact structure of a packet flowing inside a SSL based VPN? What parts of the packet are authenticated and what parts are encrypted? From my understanding there are two types of SSL VPN: ...
0 votes
1 answer
71 views

Man-in-the-middle attack only affects TLS certs with unqualified subject names?

A question came up when I was discussing that Man in the middle attacks can occur when certificates have subject names are not qualified (e.g. "localhost"). I was then told that MitM only ...
0 votes
1 answer
53 views

Client Authentication in SSL Handshake

I am trying to understand how client certificate authentication works in an SSL handshake. Can someone help to clarify the following bullet points below: Do we need to have a Client Leaf certificate ...
0 votes
1 answer
20 views

Is a server using CBC without the encrypt_then_mac TLS extension necessarily vulnerable to the LUCKY13 attack?

In order for a server to be vulnerable to the LUCKY13 exploit, it has to use a ciphersuite which uses CBC and must not use the encrypt_then_mac TLS extension. However, if both these conditions are ...
0 votes
0 answers
42 views

SSLLabs' SSLTest vs. nmap ssl-enum-ciphers

Recently I conducted a SSL server test to assess the SSL configuration of my server. While the overall grade A+ was pretty good, it was found that the server supports several cipher suites that are ...
0 votes
0 answers
210 views

Securing my API: concept of access tokens

First of all I want to excuse for the bad spelling and grammar. English is not my mother tongue. I have built a JSON communication between a front-end (website) and my Node.js web server. I want to ...
31 votes
2 answers
6k views

What measure (if any) does HTTPS use to hide the request path length?

I really, really thought I remembered seeing the existence of some standardized header or TLS packet whose purpose is to (try to) hide the length of the requested URL from an eavesdropper. But I ...
1 vote
3 answers
851 views

How to check if a mail server is Enforced-STARTLS rather than Opportunistic-STARTTLS?

This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop ...
2 votes
3 answers
55 views

TLS 1.3 - GREASE - What if Middleboxes are updated to simply ignore GREASE values? Doesn't the problem GREASE is trying to fix still exist?

Various ambiguous "middleboxes" exist at arbitrary points throughout the Internet between a Client and Server's TLS connection. A possible intent of these middleboxes is to enforce protocol ...
-1 votes
1 answer
51 views

What Keys Are Used in TLS 1.3?

In TLS 1.2 the messages sent by client are encrypted under ClientWrite, and the messages send by server are encrypted under ServerWrite. What about TLS 1.3? I don't see any Pre-Master-Secret being ...
4 votes
1 answer
745 views

Using NameConstrains in a CA certificate

I am trying to do something similar to what has been pointed out in this nice answer by Jonathon Reinhart. I have a CA certificate with Name Constrains (RFC): Permitted [1]Subtrees (0..0): ...
1 vote
1 answer
890 views

Is using both client side certificate and JWT for IoT device redundant?

Is there a case to be made for authorizing with both a client side certificate and JWT for an IoT device? Are JWTs good enough (assuming following of the specs)? And if client side certs are truly ...
0 votes
1 answer
635 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0 votes
0 answers
42 views

How to determine validation process of a certificate used by a website using HTTPS?

When visiting a website that uses HTTPS, we can see its certificate in the browser. But how can we know for sure which validation process the company or domain behind the website has gone through? ...
42 votes
2 answers
63k views

What is the actual value of a certificate fingerprint?

In a x509 digital certificate there is a "certificate fingerprint" section. It contains md5, sha1 and sha256. How are these obtained, and during the SSL connection, how are these values checked for?
0 votes
1 answer
46 views

Who starts with change cipher spec in a TLS handshake?

After looking at many explanations about the TLS handshake I noticed that sometimes the server starts with the change cipher spec command and sometimes the client starts with it. I'm wondering why. Is ...

1
2 3 4 5
113