New answers tagged certificates
2
votes
What is CA response after giving them the CSR?
The main purpose of a CA is to confirm the identity of the owner of the certificate.
In case of a website, certificate confirms that the public key really belongs to this website. Otherwise any ...
- 8,410
1
vote
What is CA response after giving them the CSR?
Possibly a .cer file!
that's correct. CA produces an X.509 certificate which often has .cer or .crt file extension.
Then What's in it and what's the use of that .cer file?
certificate contains ...
- 5,370
0
votes
Comparing ACME client logs against Certificate Transparency logs
I don't think Certificate Transparency can help you here. They can get a wildcard certificate for *.ddnsprovider.net (that will end up on the logs), and that certificate would be valid for your server ...
- 50.3k
1
vote
Accepted
Identification of weak and anonymous ciphers with openssl
Protocol : TLSv1.3
Cipher : TLS_AES_256_GCM_SHA384
In this first example a TLS 1.3 handshake was done. The -ciphers argument for openssl s_client is irrelevant in this case since (from the ...
- 181k
0
votes
OAuth2 - What is the advantage of using certificate over client secret credentials? (Azure)
I Finally understand the process.
Certificates are generated by an Authority (official CAs).
Certificates can also be generated by an entity (self-signed).
The entity has data in Azure and sends the ...
- 111
2
votes
OAuth2 - What is the advantage of using certificate over client secret credentials? (Azure)
This is a slightly generic answer as I'm not super familiar with Azure in particular.
Shared secrets are worse than public key authentication in a few ways.
They're static / persistent. If an ...
- 38.8k
1
vote
Accepted
Make certificate and private key available only to a single app
As @poncho and @MaartenBodewes said in comments, there is no general solution to this, but there may be something available on your platform.
For example, on an Android device you can get help with ...
- 57.4k
1
vote
Best practice for "stateOrProvinceName" in certificate
Which acronyms should we allow when it comes to accepting certificates?
neither. See below.
I guess that OID's have also been specified, would it be an idea to use those instead of the acronyms.
in ...
- 5,370
1
vote
Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?
TL;DR: Yes, but not a very large one if the certificate and private key are generated correctly.
What layer(s) of the network does AdGuard work on?
Typically, programs like this act as an HTTPS ...
- 38.8k
1
vote
Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?
You correctly said that the risk is not the application being naughty with that particular feature, as you already gave it more that enough ways to harm you.
A way the proxy (what it is) could lower ...
- 4,608
0
votes
Accepted
Hosting the certificates from CSP in Windows Store to be visible for other applications
I found that the CSP was called but the problem was that adobe reader couldn't resolve all dependencies.
0
votes
Non-TLS-authoritative ZSKs?
Let's say you have example.net run off a DNS server that is secure, DNSSEC-enabled for records directly on it, but cumbersome to update. Subdomain dynamic.example.net is run off a server that is easy ...
-1
votes
What does "signing" a file really mean?
It is similar to give your product(files) a laser anti-counterfeiting label,
to let others receiver(buyer) have more confident in quality, When receiver(buyer) see a signiture as real genuine ...
- 1
1
vote
Certificate based authentication vs Username and Password authentication
With the advent of user awareness of what a weak password can do, users are more likely to move to use a password manager. Consider everyone uses a password manager that creates unique passwords of a ...
- 149
Top 50 recent answers are included