Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
3
votes
Accepted
Block HTTPS/TLS (Wo)Man in the Middle Attack
In a corporate environment, there are a number of vendors that deliver TLS decryption, for example Palo Alto does this. …
1
vote
Accepted
Confused with the difference between approaches to network level, transport level and applic...
In practice nowadays, there is not a single TLS layer for all applications above it. Virtually all applications that use TLS have their own layer implemented in the application. … So, imho, b should be
+------+------+-----+
| HTTP | FTP | SMTP|
+------+------+-----+
| TLS | TLS | TLS |
+------+------+-----+
| TCP |
+-------------------+
| IP |
+-- …
1
vote
Any disadvantages to long-lived self-signed certificates for personal use?
There are a number of arguments for a shorter lifespan of certificates. You already mentioned the possibility of a compromised certificate.
Other reasons may be that, as domain names can change owners …
3
votes
Is a company decrypting all SSL traffic through a Root CA GDPR compliant?
The problem with the GDPR lies in the remark: "without even notifying this software is being installed". In that case: no it is not compliant.
If you dig a little deeper, you will find that in almost …
1
vote
Why are DNS requests visible with DNS over HTTPS enabled?
With tcpdump dst port 53, you select explicitly everything that goes to port 53, the traditional DNS port.
DNS over HTTPS uses Port 443, which is the standard port for HTTPS traffic.
Apparent …
1
vote
SQL Server connections with TLS vs. through an encrypted tunnel?
In general: use TLS. Only if the data stays within a limited network that is not accessible from the outside, you might possibly get away to do it without TLS. … But default should be TLS.
In the past, TLS (or SSL at that time) may not not have been common. It is now. …
2
votes
How to create custom exploit https requests to test a PHP framework
For Linux systems, gnutls-cli is available. For example:
gnutls-cli qnap --no-ca-verification
GET index.html
gets the index.html from my Qnap-NAS via port 443. You can of course easily make invalid h …