2
votes
Confused with the difference between approaches to network level, transport level and application level security
difference between transport and network level security by reading the
text.
There is very little difference and these discussions require context to have practical discussions.
Network level ...
- 223
2
votes
Accepted
TLS1.3 handshake encryption
I was reading about TLS1.3 and my question is that are the server hello extensions encrypted?
Yes, everything after the ServerHello/key_share is encrypted. For example, the certificate is encrypted ...
- 4,860
2
votes
TLS1.3 handshake encryption
Why is it so
To protect things like server certificates against passive sniffing.
... how are they encrypted?
The same as other encrypted TLS records, i.e. like application data. For the exact ...
- 181k
1
vote
Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?
TL;DR: Yes, but not a very large one if the certificate and private key are generated correctly.
What layer(s) of the network does AdGuard work on?
Typically, programs like this act as an HTTPS ...
- 38.9k
1
vote
Is it a risk to allow security or privacy apps to install a certificate and filter HTTPS?
You correctly said that the risk is not the application being naughty with that particular feature, as you already gave it more that enough ways to harm you.
A way the proxy (what it is) could lower ...
- 4,608
1
vote
Accepted
How risky is it to let someone know the name of your Windows PC?
Neither of those informations are considered to be secrets, and cannot be directly used to access your machine. And if you are speaking about a home machine, it is normally hidden behind your ISP ...
- 25.6k
1
vote
Confused with the difference between approaches to network level, transport level and application level security
Let's start by saying that this is a mental model to help you better learn / think about these concepts, which means the usual aphorism applies: "All models are wrong, but some are useful" --...
- 57.4k
1
vote
Accepted
Confused with the difference between approaches to network level, transport level and application level security
The pictures drawn are a bit misleading (that is to say, I think b and c are wrong).
The first is the network level security. If you implement network-level security between network A and network B, ...
- 1,877
Only top scored, non community-wiki answers of a minimum length are eligible