New answers tagged

0 votes

TLS- Concept of channel binding

While other answers are correct, I believe NTLM relaying against ADCS should be present here as a great example. The attack is described here in detail: https://www.exandroid.dev/2021/06/23/ad-cs-...
buherator's user avatar
  • 1,760
0 votes

Bloom filter to prevent replay attacks in signed HTTP requests

Instead of the nonce being a randomly generated UUID value, perhaps the nonce could be the next value in an HOTP or TOTP sequence. This would prevent replay attacks, without requiring the server ...
mti2935's user avatar
  • 22.7k
0 votes

Is there a tool for auditing my root certificates?

To my opinion your best shot would be to look at forward proxies that provides TLS interception and inspection. XDR solutions often feature such functionalities as well. Seen that the proxy has to ...
bsaverino's user avatar
  • 153
0 votes

Is there a tool for auditing my root certificates?

According to this Wikipedia article, a study of the Alexa top 10 million web sites done in April 2023 found that the issuing CA's of the certificates used to secure these sites breaks down as follows: ...
mti2935's user avatar
  • 22.7k
0 votes

What happens to the key pair once the CSR has been enrolled?

Your diagram is wrong in several ways. First: "Signing" and "encrypting with the private key" are NOT the same thing. As a detail of the RSA algorithm, signing is mathematically ...
bartonjs's user avatar
  • 1,853
1 vote
Accepted

What happens to the key pair once the CSR has been enrolled?

The CSR isn't encrypted generally. If it's an RFC 2986 Certification Request (otherwise known as PKCS#10), then it will be signed by your private key as part of the proof of possession for that ...
garethTheRed's user avatar
  • 1,569

Top 50 recent answers are included