Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 29728

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

2
votes
1answer
Why don't very many HTTPS/SSL websites supply identity information in their certs?
asked Feb 15 '15 by Geremia
1
vote
0answers
Is there any difference in performance between using, say, a 2048-bit TLS cert compared to a 4096-bit one? If so, how much difference in performance could there be? If not, why use 2040- over 4096-bit TLS certs? …
asked Mar 27 '17 by Geremia
2
votes
1answer
Can Perfect Forward Secrecy (PFS) be used to prove that a particular file was transmitted or received at a particular time? If so, how? By keeping records of the entire TLS stream? …
asked Apr 20 '18 by Geremia
7
votes
1answer
Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) attacks more difficult? If not, why?
asked Mar 10 '16 by Geremia
0
votes
What you have to do is add a SHA-256 hashes of the new cert and chain, in addition to the ones already there. Then in 60 days, you can remove the SHA-256 hashes of the old certs.
answered Oct 13 '16 by Geremia
1
vote
2answers
: When GitHub [who uses HPKP] wants to replace its TLS certificate, the new certificate must be signed by either DigiCert or Symantec – otherwise, none of the key hashes in the new certificate chain … originally pinned (e.g., Verisign)? Is this why it's recommended to pin a backup cert from a different CA?cf. p. 315 of Ivan Ristić's Bulletproof SSL and TLS (2014) …
asked Oct 13 '16 by Geremia
3
votes
1answer
Of the following ciphers for RSA authentication, Firefox and Chrome do not use stronger than ECDHE-RSA-AES128-SHA256. ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD …
asked Mar 14 '16 by Geremia