New answers tagged public-key-infrastructure
0
votes
TLS- Concept of channel binding
While other answers are correct, I believe NTLM relaying against ADCS should be present here as a great example. The attack is described here in detail:
https://www.exandroid.dev/2021/06/23/ad-cs-...
- 1,760
0
votes
Bloom filter to prevent replay attacks in signed HTTP requests
Instead of the nonce being a randomly generated UUID value, perhaps the nonce could be the next value in an HOTP or TOTP sequence. This would prevent replay attacks, without requiring the server ...
- 22.7k
0
votes
Is there a tool for auditing my root certificates?
To my opinion your best shot would be to look at forward proxies that provides TLS interception and inspection. XDR solutions often feature such functionalities as well. Seen that the proxy has to ...
- 153
0
votes
Is there a tool for auditing my root certificates?
According to this Wikipedia article, a study of the Alexa top 10 million web sites done in April 2023 found that the issuing CA's of the certificates used to secure these sites breaks down as follows:
...
- 22.7k
0
votes
What happens to the key pair once the CSR has been enrolled?
Your diagram is wrong in several ways.
First: "Signing" and "encrypting with the private key" are NOT the same thing. As a detail of the RSA algorithm, signing is mathematically ...
- 1,853
1
vote
Accepted
What happens to the key pair once the CSR has been enrolled?
The CSR isn't encrypted generally. If it's an RFC 2986 Certification Request
(otherwise known as PKCS#10), then it will be signed by your private key as part of the proof of possession for that ...
- 1,569
Top 50 recent answers are included