Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 277703

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

0 votes
1 answer
114 views

are files sent in a TLS channel signed? [duplicate]

I have 2 endpoints that are exchanging data (FIX messages), and the originating endpoint is genrating the fix files are sending them on an ecrypted channel (TLS or Stunnel). … In a security audit, it was recommended that the files are signed, and this is a bit confusing as the communication is in TLS mode, when reading on the TLS handshake it mentions that the exchanaged messages …
ethicalhacker's user avatar
0 votes
2 answers
622 views

testssl not detecting all cipher suites

| Encryption | Bits | Cipher Suite Name (IANA/RFC) ____________________________________________________________________________ SSLv2 SSLv3 TLS 1 TLS 1.1 TLS 1.2 xc030 | ECDHE-RSA-AES256 … | ECDH 256 | AESGCM | 128 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 xc027 | ECDHE-RSA-AES128-SHA256 | ECDH 256 | AES | 128 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS
ethicalhacker's user avatar
0 votes
2 answers
959 views

Is TLS version related to the server in a Java thick client application?

I'm investigating why it is not supported, so I was looking in the Java code for where TLS 1.3 is defined. … But in Java code they only exclude old versions of TLS like 1.0 and 1.1 but they don't define which version of TLS. Is that true? …
ethicalhacker's user avatar
2 votes
4 answers
406 views

Using FIX over TLS, is there a need to sign FIX mesages?

Server B provided me initially with certificates to implement TLS between us. So now we have a TLS communication between server A and server B exchanging FIX messages. … Noting that TLS does not sign the payloads (in my case the embedded FIX message), do I need to sign the FIX messages before they are sent over TLS? When do I need to sign payloads? …
ethicalhacker's user avatar