Hot answers tagged

2 votes

Confused with the difference between approaches to network level, transport level and application level security

difference between transport and network level security by reading the text. There is very little difference and these discussions require context to have practical discussions. Network level ...
user avatar
  • 223
2 votes
Accepted

TLS1.3 handshake encryption

I was reading about TLS1.3 and my question is that are the server hello extensions encrypted? Yes, everything after the ServerHello/key_share is encrypted. For example, the certificate is encrypted ...
user avatar
  • 4,860
2 votes

TLS1.3 handshake encryption

Why is it so To protect things like server certificates against passive sniffing. ... how are they encrypted? The same as other encrypted TLS records, i.e. like application data. For the exact ...
user avatar
1 vote

Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?

TL;DR: Yes, but not a very large one if the certificate and private key are generated correctly. What layer(s) of the network does AdGuard work on? Typically, programs like this act as an HTTPS ...
user avatar
  • 38.9k
1 vote

Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?

You correctly said that the risk is not the application being naughty with that particular feature, as you already gave it more that enough ways to harm you. A way the proxy (what it is) could lower ...
user avatar
  • 4,608
1 vote
Accepted

How risky is it to let someone know the name of your Windows PC?

Neither of those informations are considered to be secrets, and cannot be directly used to access your machine. And if you are speaking about a home machine, it is normally hidden behind your ISP ...
user avatar
1 vote

Confused with the difference between approaches to network level, transport level and application level security

Let's start by saying that this is a mental model to help you better learn / think about these concepts, which means the usual aphorism applies: "All models are wrong, but some are useful" --...
user avatar
1 vote
Accepted

Confused with the difference between approaches to network level, transport level and application level security

The pictures drawn are a bit misleading (that is to say, I think b and c are wrong). The first is the network level security. If you implement network-level security between network A and network B, ...
user avatar
  • 1,877

Only top scored, non community-wiki answers of a minimum length are eligible