New answers tagged public-key-infrastructure
-1
votes
Secure data (+ private key) storage in an insecure public cloud environment
This is certainly possible using new encryption schemes.
See sample code below:
Alice wants to send a message to a Resource Server X. The resource server saves the encrypted data in the cloud and I ...
1
vote
Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1
Seems like the whole exercise will depend on your business needs. You probably need to think of those first and then choose a suitable architecture, https://doc.primekey.com/ejbca/ejbca-introduction/...
- 375
-1
votes
For organizations running modern, functioning PKI, can mTLS be used as SSO mechanism?
Mutual TLS connections provide an "AlwaysON" proof of possession. Malicious software can inject data silently if the software has already opened the private key.
Two factors as Yubico or ...
0
votes
X509 / SSL certificates in practise
You're not really asking about X.509 and certificates, but how they are used within the TLS handshake to arrive at a secure and authenticated AES session key.
I would recommend you study this page, ...
- 57.1k
6
votes
Where does the root of trust actually lie?
What you describe is a supply chain attack. And it is something relatively hard to protect from.
what are some guidelines that individuals and organizations can follow to ensure they don't become a ...
- 17.4k
11
votes
Where does the root of trust actually lie?
The root CA list is not hardware-based (in the general case, see about the TPM below). It comes as a built-in feature of your operating system.
Other software (e.g. browsers, mail clients, etc...) may ...
- 3,395
12
votes
Where does the root of trust actually lie?
My question is, what are some guidelines that individuals and organizations can follow to ensure they don't become a target of such an attack?
One way to avoid being the target is to not do anything ...
- 10.8k
7
votes
Where does the root of trust actually lie?
TLDR: Check fingerprints of certificates on your device.
All certificates, not only root ones, have fingerprints. These fingerprints are publicly known. If you have any doubts about certificates on ...
- 7,926
18
votes
Where does the root of trust actually lie?
My question is, what are some guidelines that individuals and
organizations can follow to ensure they don't become a target of such
an attack?
The attack in the hypothetical example that you describe ...
- 19.6k
0
votes
Can I concatenate multiple x509 certificates?
I think it's unsupported for cert that may be sent within the TLS handshake, and when I execute openssl x509 -in combined.crt -noout -text, only then first CERTIFICATE block display.
But if you ...
1
vote
Secure data (+ private key) storage in an insecure public cloud environment
I'm sure there's a few security professionals that can spin stories about "military grade" security.
So you want to encrypt data and process it with zero insider threat? What you're looking ...
- 871
Top 50 recent answers are included