Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 200793

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

3 votes
Accepted

Block HTTPS/TLS (Wo)Man in the Middle Attack

In a corporate environment, there are a number of vendors that deliver TLS decryption, for example Palo Alto does this. …
Ljm Dullaart's user avatar
  • 2,180
1 vote
Accepted

Confused with the difference between approaches to network level, transport level and applic...

In practice nowadays, there is not a single TLS layer for all applications above it. Virtually all applications that use TLS have their own layer implemented in the application. … So, imho, b should be +------+------+-----+ | HTTP | FTP | SMTP| +------+------+-----+ | TLS | TLS | TLS | +------+------+-----+ | TCP | +-------------------+ | IP | +-- …
Ljm Dullaart's user avatar
  • 2,180
1 vote

Any disadvantages to long-lived self-signed certificates for personal use?

There are a number of arguments for a shorter lifespan of certificates. You already mentioned the possibility of a compromised certificate. Other reasons may be that, as domain names can change owners …
Ljm Dullaart's user avatar
  • 2,180
3 votes

Is a company decrypting all SSL traffic through a Root CA GDPR compliant?

The problem with the GDPR lies in the remark: "without even notifying this software is being installed". In that case: no it is not compliant. If you dig a little deeper, you will find that in almost …
Ljm Dullaart's user avatar
  • 2,180
1 vote

Why are DNS requests visible with DNS over HTTPS enabled?

With tcpdump dst port 53, you select explicitly everything that goes to port 53, the traditional DNS port. DNS over HTTPS uses Port 443, which is the standard port for HTTPS traffic. Apparent …
Ljm Dullaart's user avatar
  • 2,180
1 vote

SQL Server connections with TLS vs. through an encrypted tunnel?

In general: use TLS. Only if the data stays within a limited network that is not accessible from the outside, you might possibly get away to do it without TLS. … But default should be TLS. In the past, TLS (or SSL at that time) may not not have been common. It is now. …
Ljm Dullaart's user avatar
  • 2,180
2 votes

How to create custom exploit https requests to test a PHP framework

For Linux systems, gnutls-cli is available. For example: gnutls-cli qnap --no-ca-verification GET index.html gets the index.html from my Qnap-NAS via port 443. You can of course easily make invalid h …
Ljm Dullaart's user avatar
  • 2,180