Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with tls
Search options not deleted
user 3306
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
3
votes
HTTPS vs. HTTP - Is there a security reason for HTTPS for a site that only does Facebook login?
SSL is cheap financially and computationally.
If you're doing new deployment, there's no reason not to if you're using any login at all. When in doubt, use SSL. You may require it later, and rolling …
- 3,798
4
votes
Do client certificates need to be trusted by the client?
No, the client doesn't need to trust the certificates it presents to the server. (The server doesn't need to trust the certificates it presents to the client either). Only the other side of the connec …
- 3,798
10
votes
2
answers
6k
views
SSL Session resumption and IDs
Some sites, as seen in the report for www.mbank.com.pl [ssllabs.com] or report for aliorbank.pl [ssllabs.com] do not support "Session resumption", either because IDs are assigned but not accepted (fir …
- 3,798
11
votes
How to set "Not Before" value to past when creating certificate request
As Thomas Pornin said, the certificate request does not contain any dates, the notBefore and notAfter dates are set when the new certificate is created (signed) by the CA.
If you use the openssl ca t …
- 3,798
3
votes
Firefox detected an invalid SSL certificate
The HTTP server may not be serving the intermediate certificates. Try using openssl s_client to verify what certificates do you get:
openssl s_client -connect www.google.com:443 -showcerts -CApath /e …
- 3,798
12
votes
1
answer
3k
views
SSL TLS renegotiation vulnerability - current situation in clients
Reading about the SSL renegotiation problem CVE-2009-3555 one knows that servers supporting old type of renegotiation are vulnerable to data injection. We also have tools to test them (openssl s_clien …
- 3,798
103
votes
4
answers
147k
views
What is ECDHE-RSA?
What is the difference between ECDHE-RSA and DHE-RSA?
I know that DHE-RSA is (in one sentence) Diffie Hellman signed using RSA keys. Where DH is used for forward secrecy and RSA guards against MITM, …
- 3,798
14
votes
2
answers
9k
views
Which cipher suites with AES cipher provide forward secrecy?
Does standard AES with RSA (reported by Opera as TLS v1.0 256 bit AES (1024 bit RSA/SHA)) provide perfect forward secrecy?
Which SSL3.0 and TLS1.0 ciphers do provide forward secrecy? …
- 3,798
8
votes
Accepted
How secure is HTTPS with weak ciphersuites?
RC4 is now not considered secure, there are documents that explicitly forbid its use in TLS: RFC7465. … You should not use RC4 currently.
post updated as obsolete information about crypto is dangerous
Obsolete information, as posted in 2012:
RC4 is secure, in fact, if you're not using TLS 1.2 then you should …
- 3,798