2022 Developer Survey is open! Take survey.

New answers tagged

-1 votes

Secure data (+ private key) storage in an insecure public cloud environment

This is certainly possible using new encryption schemes. See sample code below: Alice wants to send a message to a Resource Server X. The resource server saves the encrypted data in the cloud and I ...
user avatar
1 vote

Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1

Seems like the whole exercise will depend on your business needs. You probably need to think of those first and then choose a suitable architecture, https://doc.primekey.com/ejbca/ejbca-introduction/...
user avatar
-1 votes

For organizations running modern, functioning PKI, can mTLS be used as SSO mechanism?

Mutual TLS connections provide an "AlwaysON" proof of possession. Malicious software can inject data silently if the software has already opened the private key. Two factors as Yubico or ...
user avatar
0 votes

X509 / SSL certificates in practise

You're not really asking about X.509 and certificates, but how they are used within the TLS handshake to arrive at a secure and authenticated AES session key. I would recommend you study this page, ...
user avatar
6 votes

Where does the root of trust actually lie?

What you describe is a supply chain attack. And it is something relatively hard to protect from. what are some guidelines that individuals and organizations can follow to ensure they don't become a ...
user avatar
  • 17.4k
11 votes

Where does the root of trust actually lie?

The root CA list is not hardware-based (in the general case, see about the TPM below). It comes as a built-in feature of your operating system. Other software (e.g. browsers, mail clients, etc...) may ...
user avatar
  • 3,395
12 votes

Where does the root of trust actually lie?

My question is, what are some guidelines that individuals and organizations can follow to ensure they don't become a target of such an attack? One way to avoid being the target is to not do anything ...
user avatar
  • 10.8k
7 votes

Where does the root of trust actually lie?

TLDR: Check fingerprints of certificates on your device. All certificates, not only root ones, have fingerprints. These fingerprints are publicly known. If you have any doubts about certificates on ...
user avatar
  • 7,926
18 votes

Where does the root of trust actually lie?

My question is, what are some guidelines that individuals and organizations can follow to ensure they don't become a target of such an attack? The attack in the hypothetical example that you describe ...
user avatar
  • 19.6k
0 votes

Can I concatenate multiple x509 certificates?

I think it's unsupported for cert that may be sent within the TLS handshake, and when I execute openssl x509 -in combined.crt -noout -text, only then first CERTIFICATE block display. But if you ...
user avatar
1 vote

Secure data (+ private key) storage in an insecure public cloud environment

I'm sure there's a few security professionals that can spin stories about "military grade" security. So you want to encrypt data and process it with zero insider threat? What you're looking ...
user avatar

Top 50 recent answers are included