New answers tagged

2 votes

What is CA response after giving them the CSR?

The main purpose of a CA is to confirm the identity of the owner of the certificate. In case of a website, certificate confirms that the public key really belongs to this website. Otherwise any ...
user avatar
  • 8,410
1 vote

What is CA response after giving them the CSR?

Possibly a .cer file! that's correct. CA produces an X.509 certificate which often has .cer or .crt file extension. Then What's in it and what's the use of that .cer file? certificate contains ...
user avatar
  • 5,370
0 votes

Comparing ACME client logs against Certificate Transparency logs

I don't think Certificate Transparency can help you here. They can get a wildcard certificate for *.ddnsprovider.net (that will end up on the logs), and that certificate would be valid for your server ...
user avatar
  • 50.3k
1 vote
Accepted

Identification of weak and anonymous ciphers with openssl

Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 In this first example a TLS 1.3 handshake was done. The -ciphers argument for openssl s_client is irrelevant in this case since (from the ...
user avatar
0 votes

OAuth2 - What is the advantage of using certificate over client secret credentials? (Azure)

I Finally understand the process. Certificates are generated by an Authority (official CAs). Certificates can also be generated by an entity (self-signed). The entity has data in Azure and sends the ...
user avatar
  • 111
2 votes

OAuth2 - What is the advantage of using certificate over client secret credentials? (Azure)

This is a slightly generic answer as I'm not super familiar with Azure in particular. Shared secrets are worse than public key authentication in a few ways. They're static / persistent. If an ...
user avatar
  • 38.8k
1 vote
Accepted

Make certificate and private key available only to a single app

As @poncho and @MaartenBodewes said in comments, there is no general solution to this, but there may be something available on your platform. For example, on an Android device you can get help with ...
user avatar
1 vote

Best practice for "stateOrProvinceName" in certificate

Which acronyms should we allow when it comes to accepting certificates? neither. See below. I guess that OID's have also been specified, would it be an idea to use those instead of the acronyms. in ...
user avatar
  • 5,370
1 vote

Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?

TL;DR: Yes, but not a very large one if the certificate and private key are generated correctly. What layer(s) of the network does AdGuard work on? Typically, programs like this act as an HTTPS ...
user avatar
  • 38.8k
1 vote

Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?

You correctly said that the risk is not the application being naughty with that particular feature, as you already gave it more that enough ways to harm you. A way the proxy (what it is) could lower ...
user avatar
  • 4,608
0 votes
Accepted

Hosting the certificates from CSP in Windows Store to be visible for other applications

I found that the CSP was called but the problem was that adobe reader couldn't resolve all dependencies.
user avatar
0 votes

Non-TLS-authoritative ZSKs?

Let's say you have example.net run off a DNS server that is secure, DNSSEC-enabled for records directly on it, but cumbersome to update. Subdomain dynamic.example.net is run off a server that is easy ...
user avatar
-1 votes

What does "signing" a file really mean?

It is similar to give your product(files) a laser anti-counterfeiting label, to let others receiver(buyer) have more confident in quality, When receiver(buyer) see a signiture as real genuine ...
user avatar
  • 1
1 vote

Certificate based authentication vs Username and Password authentication

With the advent of user awareness of what a weak password can do, users are more likely to move to use a password manager. Consider everyone uses a password manager that creates unique passwords of a ...
user avatar
  • 149

Top 50 recent answers are included