Questions tagged [tls]
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
5,566
questions
36
votes
6
answers
30k
views
Where to get an SSL certificate for personal website?
I would like to use https to login to my personal webpage (which is on shared hosting). So I went over to google and started searching for sollutions. Eventualy I found out that I need an SSL ...
- 3,272
4
votes
2
answers
2k
views
On iOS, what's the benefit of OpenSSL over using CFStream, CFNetwork etc. for secure sockets?
I asked this already on Stack Overflow, here. I was told I might find answers here.
- 141
15
votes
6
answers
6k
views
Can Javascript/Flash verify the SSL connection to prevent "SSL Inspection"?
I'd like to determine if an SSL webpage is being debugged through Fiddler, or if it's going through an SSL Proxy.
So some people may ask
What is the point of re-validating SSL using javascript?
...
- 50.1k
401
votes
10
answers
274k
views
Is BASIC-Auth secure if done over HTTPS?
I'm making a REST-API and it's straight forward to do BASIC auth login. Then let HTTPS secure the connection so the password is protected when the api is used.
Can this be considered secure?
- 4,163
51
votes
6
answers
68k
views
Are there security issues with embedding an HTTPS iframe on an HTTP page?
I've seen websites placing HTTPS iframes on HTTP pages.
Are there any security concerns with this? Is it secure to transmit private information like credit card details in such a scheme (where the ...
- 613
21
votes
1
answer
7k
views
SFTP, FTPS and SecureFTP differences and security implications
What are the basic differences and security implications of using SFTP, FTPS and SecureFTP.
- 3,251
11
votes
2
answers
1k
views
Why is Firesheep Unable to Session Hijack over SSL?
Why is Firesheep unable to session hijack when a user is using SSL?
- 211
10
votes
6
answers
536
views
Should we configure all devices to never request SSL 2.0, and reject it if offered?
In an effort to reduce man in the middle attacks, when will it be (or was it) an industry accepted practice to reject SSL 2.0 connections on the client and server side?
Is configuring this on a proxy ...
- 50.1k
27
votes
2
answers
54k
views
What are the differences between the versions of TLS?
Please correct me if I'm wrong, but my understanding is that SSLv3 and TLSv1 is just a rename of the earlier protocol... but TLSv1 adds the ability to have secured and unsecured traffic on the same ...
- 50.1k
81
votes
13
answers
26k
views
What are the pros and cons of site wide SSL (https)?
What are the pros and cons of encrypting all HTTP traffic for the whole site through SSL, as opposed to SSL on just the login page?
- 5,039
12
votes
4
answers
3k
views
What kinds of SSL certificates are usable for encryption?
I know that Verizon SSL certificates cost close to $600.
There are couple of cheap alternatives, but I never really understood why Verizon does not offer such certificates. Look for RapidSSL at ...
- 693
14
votes
2
answers
2k
views
What is the best way to verify the SSL configuration of my web server?
How do I ensure I have my SSL configuration setup securely?
- 13.7k
51
votes
3
answers
107k
views
How can I check that my cookies are only sent over encrypted https and not http?
I read a blog post GitHub moves to SSL, but remains Firesheepable that claimed that cookies can be sent unencrypted over http even if the site is only using https. They write that a cookie should be ...
- 5,053
34
votes
6
answers
10k
views
Does it matter which Certificate Authority I source my SSL Certificate from?
To secure my web site with HTTPS, does it matter which company I source my SSL certificate from, or just that the browser recognizes it?
From the Area51 proposal.
AviD♦
- 72k
22
votes
5
answers
3k
views
What is the best option for setting up a several sites supporting SSL on the same IP?
If multiple hostnames are hosted on the same IP, it's not straight forward to allow them to support https. What are the best options in terms of browser support and/or web server support?
- 2,195
115
votes
18
answers
20k
views
Does an established HTTPS connection mean a line is really secure?
From the view of somebody offering a web application, when somebody connects with TLS (https) to our service and submits the correct authentication data, is it safe to transmit all sensitive data over ...
- 2,689