Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Popular web browser by Google, see chrome.google.com for more information.
1
vote
Disabling CBC ciphers does not stop Chrome from negotiating to use CBC ciphers
Chrome can not pick anything the server is not offering.
Check your server with SSL Labs (be sure to check the "Do not show the results on the boards" checkbox)
https://www.ssllabs.com/ssltest/ …
15
votes
Accepted
Securing Google Chrome Browser against the Logjam exploit on Windows
I don't think Chrome even supports all of these cipher suites. (You could check using the SSL Labs client test.))
Update 2015-07-03: Chrome still vulnerable. … this.
https://dh1024.badssl.com/, Chrome accepts this.
https://dh2048.badssl.com/, Chrome accepts this. …
1
vote
Accepted
Google Chrome browser warning for goo.gl
Google's Diagnostic page says:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fgoo.gl
Part of this site was listed for suspicious activity 1 time(s) over the past …
1
vote
Is my sha1 SSL cert safe if they expire before 2016?
Chrome (your link),
Firefox (https://blog.mozilla.org/security/2014/09/23/phasing-out-certificates-with-sha-1-based-signature-algorithms/)
and Windows (http://blogs.technet.com/b/pki/archive/2013/11/12 …
2
votes
Do any browsers support Server Name Indication (SNI) but NOT SHA-2?
Chrome uses the OS-level-cert-management. So it can only accept certs that the OS says are good. … (Note: Google's support for Chrome on XP ends 2016-04.)
(Disclaimer: I haven't actually tested this.) …
1
vote
I delete cookies file in chrome but i'm still logged in after I restart Chrome
Local storage?
In modern browsers Facebook also uses "Local Storage" (although I don't know if for login), which is different from plain old cookies. (Check using the F12 key.)
5
votes
My site has Certificate Transparency enabled but Chrome is still showing NET::ERR_CERTIFICAT...
Further reading:
SSLMate Blog, 2016-09-07, Why Chrome 53 is Rejecting Chase Bank's Symantec Certificate (Archived here.) … The result is a Franken-certificate that works fine in browsers that don't support Certificate Transparency, but fails to validate in Chrome.
Log entry without redaction: https://crt.sh/? …
5
votes
Accepted
Invalid OCSP signing certificate in OCSP response
It seems their OCSP-cert has expired on September 10th.
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issu …
9
votes
Accepted
Obsolete cryptography (SHA1) warning although certificate uses SHA256
What to do
Enable and have the server prefer a cipher suite that Chrome likes better. Namely: Something with forward secrecy and either AES-GCM or CHACHA20_POLY1305. …
8
votes
Accepted
Are X.509 nameConstraints on certificates supported on OS X?
Developer Ryan Sleevi had this to say on Aug 25, 2014 (archived here):
Chrome defers to the OS cryptographic stack for verification. …
0
votes
HTTPS connection issue on Chrome/Chromium/Opera
"Subject Alternative Name missing"
Chrome requires SAN and no longer supports CommonName. …
5
votes
Accepted
Why does my Chrome still trust Thawte certificate?
Weird phased rollout mechanism.
Their rollout mechanism was supposed to be "in v70 it STOPS working!". But now they seem to have settled on something like "in v70 it will show a warning in the dev con …