Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 67304

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

0
votes
TLS is a wrapper around the application protocol. In the case of OpenSSL, after configuring the connection, you use SSL_read and SSL_write instead of normal read/write calls; these take care of wrapping/unwrapping the application protocol in SSL/TLS for you. …
answered Mar 24 '16 by Phil Lello
3
votes
1answer
As hinted at in Does any technology prevent a CA unilaterally revoking a certificate?, I'm a little uncomfortable with the possibility that CAs effectively licensing a website to operate (given the de …
asked Mar 22 '16 by Phil Lello
12
votes
2answers
published via HTTPS (i.e., protected with TLS), to protect against MITM? Is that field just noise that shouldn't be used by a client? I know that Is publishing CRLs over HTTP a potential vulnerability …
asked Mar 21 '16 by Phil Lello
1
vote
The certificate doesn't tell you the website is trustworthy; it tells you that you're probably connected to the website you think you are (they might have had their private key stolen). Self-signed c …
answered Mar 28 '16 by Phil Lello
2
votes
1answer
effectively mandates TLS, since there isn't a mainstream browser implementation supporting h2c. Whilst the aims of the "SSL everywhere" movement seems reasonable, I'm unconvinced. I'm concerned that in … concern, it certainly isn't universal - indeed, reliable connectivity is an issue in some locations, and a caching proxy is an appealing solution. TLS proxies already exist that can be used to mitigate …
asked Mar 13 '16 by Phil Lello
1
vote
Yes, and it's not a technical one, it's psychological. Every time you, I, or anyone else accepts a suspicious cert, it makes us less resistant to doing it again next time. Sooner or later, something b …
answered Mar 13 '16 by Phil Lello