Questions tagged [tls]
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
5,605
questions
0
votes
1
answer
21
views
SSTP VPN security feature
Do we know exactly whether and for which parts of the packet confidentiality and integrity properties are guaranteed using SSTP VPN?
Specifically confidentiality is enforced on the header of the ...
- 3
1
vote
0
answers
26
views
What damage can a malicious wifi hotspot cause? [duplicate]
I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN.
That seems strange ...
- 3,902
0
votes
0
answers
10
views
How can I add secure DNS (DoH) to Windows settings before Windows makes any connections to the Internet during installation? [migrated]
Is there a way I can add DNS over HTTPS details to Windows settings before it makes the first connection to the Internet during installation? I'm using the latest version of Windows 11.
Either by ...
- 1
0
votes
0
answers
15
views
Should you compress the body of a HTTP(S) response before passing it to openssl? C++ [duplicate]
Should you compress the body of a HTTPS response before passing it to openssl? C++
I am aware of the attacks that are made possible by compressing a HTTP(s) response as explained over here. But ...
1
vote
0
answers
27
views
Fragmentation in TLS
I have a question related to the correct interpretation of RFC 5246 (TLS v1.2), in particular concerning the fragmentation in the record layer.
"6.2 Record Layer" states that the record ...
- 111
1
vote
1
answer
74
views
Host header is preferred by OpenSSL over SNI
As I understand a webserver shall serve SNI first and ignore HOST header from HTTP 1.1 as TLS handshakes occurs before HTTPS, to test I came up with this example: two domain names under the same IP ...
- 343
18
votes
2
answers
4k
views
Why doesn't a TLS certificate with a domain name mask that doesn't match the site name trigger a warning in the browser?
I visited stackoverflow.com and found in Chrome that its certificate is valid and has Common Name (CN) *.stackexchange.com. After that I checked a fingerprint for stackexchange.com and it matched ...
- 343
0
votes
0
answers
10
views
How to View HTTP(S) Headers sent FROM tinyproxy [closed]
The main pursuit of this post is to find a way to view the HTTP(S) Headers that are outgoing from my open source proxy server, Tinyproxy. I would like to accomplish this with PHP if possible, but will ...
- 101
0
votes
0
answers
31
views
How does Certificate Transparency protect from hacked CA server [duplicate]
I was able to grasp how CT works by reading this explanation, but one thing remains unclear for me - how CT may protect ecosystem from hacked CA server. For example, someone hacked Digicert, and now ...
- 343
0
votes
0
answers
38
views
Do I need https for a web server that will be used locally? [duplicate]
I have a web server that will be used to manage the stock of a warehouse in a factory. The web server will be accessed only locally so the clients can update and view the available stock. The server ...
- 1
0
votes
0
answers
24
views
How to configure server for client certificate authentication?
I have seen some service providers that use certificates for client authentication, so that any browser without the certificate will be rejected. However, the browsers with trusted certificates could ...
- 113
0
votes
2
answers
106
views
Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?
If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
user282383
2
votes
0
answers
44
views
With TLS 1.3 is it possible to conduct the handshake on a separate device from where the main channel is?
With TLS 1.3 a PSK is established along with main secrets for the encrypted channel.
Can this mechanism be employed to allow client authentication to occur on one device (say a mobile device), which ...
- 159
0
votes
1
answer
67
views
TLS 1.3 client communicating with TLS 1.2 server
I am testing TLS 1.3 for my application. Can a TLS 1.3 enabled client communicate with a TLS 1.2 enabled server? If yes, what should be the record layer for the initial client hello? Currently, I am ...
0
votes
0
answers
6
views
Prevent users from ignoring certificate warnings [migrated]
Is it possible to prevent users to bypass a certificate warning showed in their browser, and if so, how?
Assuming we have no control on the remote server, and total control on the client computer.
- 71
0
votes
1
answer
32
views
CA-signed certificate for localhost / production app
I have developed an application that consists of various parts, each part communicating either via http and / or gRPC to one another.
All communication has been switched over to TLS using a self-...
- 3
0
votes
0
answers
29
views
TLS 1.3 Handshake issue - client is tls 1.3 enabled and server is tls 1.2 enabled [duplicate]
I am using a TLS 1.3 enabled server (windows 2022) as the client (running my application on the server) and trying to communicate with a 2012 Windows server that is TLS 1.2 enabled.
The initial client ...
0
votes
2
answers
25
views
Does send HTTP requests as signed tokens make sense when mutual TLS is used?
When we use mTLS, then client and server are authenticated. In this scenario, does it make any sense to send HTTP requests in signed tokens (like JWS)?
- 21
0
votes
0
answers
32
views
OCSP Must-Staple test website?
I'm interested in the status of OCSP respect in modern browsers (particularly the one I'm using right now).
Is there any website that will allow me to test how my browser treats the status_request ...
0
votes
0
answers
60
views
How to PoC the CVE-2015-4000 logjam vulnerability
I ran testssl.sh on a server and can see that it is vulenrable to logjam.
Now I am interested in doing a PoC to validate the server is exploitable to this vulenrability.
I searched through google but ...
0
votes
0
answers
65
views
SSL VPN packet structure
What is the exact structure of a packet flowing inside a SSL based VPN? What parts of the packet are authenticated and what parts are encrypted?
From my understanding there are two types of SSL VPN: ...
- 3
0
votes
2
answers
61
views
Could certificate pinning work if one checks the intermediate certificate when the leaf certificate already expired?
I have the following scenario:
When the leaf certificate expires, the intermediate certificate is checked and if the intermediate is not expired, the application will keep running and will not be ...
- 1
0
votes
1
answer
53
views
Client Authentication in SSL Handshake
I am trying to understand how client certificate authentication works in an SSL handshake.
Can someone help to clarify the following bullet points below:
Do we need to have a Client Leaf certificate ...
- 3
0
votes
1
answer
20
views
Is a server using CBC without the encrypt_then_mac TLS extension necessarily vulnerable to the LUCKY13 attack?
In order for a server to be vulnerable to the LUCKY13 exploit, it has to use a ciphersuite which uses CBC and must not use the encrypt_then_mac TLS extension. However, if both these conditions are ...
- 103
0
votes
0
answers
42
views
SSLLabs' SSLTest vs. nmap ssl-enum-ciphers
Recently I conducted a SSL server test to assess the SSL configuration of my server. While the overall grade A+ was pretty good, it was found that the server supports several cipher suites that are ...
- 111
0
votes
1
answer
71
views
Man-in-the-middle attack only affects TLS certs with unqualified subject names?
A question came up when I was discussing that Man in the middle attacks can occur when certificates have subject names are not qualified (e.g. "localhost"). I was then told that MitM only ...
- 1
2
votes
3
answers
55
views
TLS 1.3 - GREASE - What if Middleboxes are updated to simply ignore GREASE values? Doesn't the problem GREASE is trying to fix still exist?
Various ambiguous "middleboxes" exist at arbitrary points throughout the Internet between a Client and Server's TLS connection.
A possible intent of these middleboxes is to enforce protocol ...
- 751
1
vote
2
answers
55
views
Is it a good idea to reuse certificate issued by public CA for internal database client authentication?
Let's say we have:
Publicly available HTTPS API (e.g. api.example.com). The web server that runs it uses a certificate from a publicly trusted CA (e.g. Let's Encrypt) with both server auth and client ...
- 11
0
votes
0
answers
42
views
How to determine validation process of a certificate used by a website using HTTPS?
When visiting a website that uses HTTPS, we can see its certificate in the browser. But how can we know for sure which validation process the company or domain behind the website has gone through?
...
user279925
0
votes
1
answer
46
views
Who starts with change cipher spec in a TLS handshake?
After looking at many explanations about the TLS handshake I noticed that sometimes the server starts with the change cipher spec command and sometimes the client starts with it.
I'm wondering why. Is ...
0
votes
1
answer
53
views
Browsers don't trust SSL certificates of network-local host signed by own CA
I've got a Mayan EDMS running on a computer on the local network. The Web App is exposed via HTTPS on the non-standard port 8001 and it uses an SSL certificate that is signed by our own CA.
The CA is ...
- 103
0
votes
1
answer
69
views
Why my certificate is still not recognized by some hosts?
My website certificate is not recognized by all hosts.
I already scanned here https://www.ssllabs.com/ssltest/analyze.html?d=eleicoesjustas.org.
Is that because of Java trust store?
Unfortunately some ...
- 203
2
votes
1
answer
107
views
How do I ship my SSL keys with my application?
I have an executable, and I have the SSL certificates and keys necessary to establish the secure connection. The application performs self-updating by downloading and replacing itself with an updated ...
- 121
0
votes
2
answers
47
views
Is an IRC conversation using TLS between two people, one of whom owns the server, end to end encrypted?
If I run an IRC server, and my friend and I connect over TLS and chat, is the conversation essentially end-to-end encrypted because all computers that see the plaintext messages are owned by one of ...
- 115
0
votes
2
answers
203
views
Why does anyone not use Let's Encrypt?
Let's Encrypt offers free TLS certificates, including wildcard certificates. Is there ever a reason to pay for a certificate? Is it just "we have to pay for everything so we can sue someone if ...
- 115
0
votes
0
answers
48
views
Database TLS and certificates clarification
Is this behaviour of MongoDB secure?
Database TLS is turned on and the client's cert .pem is loaded on the machine. When the client-side app is launched and communicating with the database, the cert ...
-1
votes
1
answer
51
views
What Keys Are Used in TLS 1.3?
In TLS 1.2 the messages sent by client are encrypted under ClientWrite, and the messages send by server are encrypted under ServerWrite.
What about TLS 1.3? I don't see any Pre-Master-Secret being ...
- 19
2
votes
1
answer
53
views
How SSL Protects against Replay Attacks?
Reading: https://mulloverthing.com/how-does-ssl-protect-against-replay-attack/ it says:
The SSL/TLS channel itself is protected against replay attacks using
the MAC (Message Authentication Code), ...
- 19
0
votes
0
answers
28
views
Which Keys TLS uses? [duplicate]
I know that in TLS 1.2 the client generates PMS (Pre Master Secret) which is used to get master_secret and Key_Block.
Where Key_Block combined with clinet_random and server_random gives us: clientMAC, ...
- 19
2
votes
2
answers
75
views
What happens when you ignore HTTPS warning?
I’m setting up a router at home, and I just created a CA and signed a cert with it. The first time I navigated to the router console, I was greeted with the familiar scary Safari warning about ...
- 21
0
votes
0
answers
38
views
SSL certificates their public keys and thumbprints
I want to use mTLS, so for testing I created simple API. I wanted to check if I will receive the public key of the certificate after the client sends the certificate to me (the server) as I want to ...
- 21
1
vote
2
answers
80
views
Is there anything wrong with comparing two TLS certificates by public keys?
Suppose you're interested in establishing a TLS connection with a specific host, and won't be using any sort of CA, or x509 certificate chains - you only want to compare if the target host uses a ...
- 111
0
votes
1
answer
39
views
mTLS with OpenID Connect and validating self-signed certificates
OIDC says mTLS can be used to authenticate the client. But I haven't read anywhere whether the OIDC Provider is supposed to accept self-signed SSL certificates. Are there any dangers to accepting self-...
- 21
0
votes
2
answers
67
views
Is it possible to get "real" IP from a host machine which is using a SSL-VPN connection?
We'd like to obtain the public IP of a user that connects via SSL VPN, the one that the user would have if he didn't connect that way.
But this looks impossible to do, if we use web services like the ...
- 149
0
votes
0
answers
14
views
HTTPS and Network Safety [duplicate]
Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
- 142
1
vote
2
answers
52
views
Do CloudFront edges talk to custom origins over open (non-AWS) networks?
Where the custom origin server for an AWS CloudFront distribution is an EC2 instance accessible with a public DNS record, do CloudFront edge locations talk to it over the open Internet — as opposed to ...
- 669
0
votes
1
answer
47
views
Can applications or websites know if their traffic is decrypted and re-encrypted by Fiddler? [duplicate]
Can websites, server-side apps such as those that rely on a constant connection with server e.g. messaging apps, server-side online games such as those that rely on constant server connection for ...
user279925
0
votes
1
answer
123
views
disabledAlgorithms 'DH keySize < 2048' ignored
I have a JBoss application running on openjdk version "1.8.0_212" where I can influence the security settings via the java.security file. However, using this line:
jdk.tls.disabledAlgorithms=...
- 3
8
votes
2
answers
2k
views
Could intermediate certificate authority loop back to itself?
Excuse me in advance since I'm new to this. From what I understand, when the client receive the server certificate, client would verify the cert/ cert chain against its trust list. It would follow the ...
- 81
0
votes
1
answer
39
views
CNG SSL Provider Functions - how are they called?
I've been studying the various cryptographic APIs on Windows, and the flow that Windows goes through when an application creates an SSL connection.
One of the APIs I've come across are the CNG SSL ...
- 111