2
votes
TLSv1: should DHE be enabled?
It looks like dbheater attack is the reason why DHE ciphers are disabled on most popular sites.
There are some discussions about how serious this threat is:
https://github.com/mozilla/ssl-config-...
2
votes
Accepted
Is this wireshark capture using TLS 1.2 or 1.3?
Look at ServerHello message, in its extensions, does it have a "supported_versions" extension? In that, the server indicates TLS1.3. If it's not present then it's TLS1.2. See the RFC.
1
vote
Accepted
Why is my website certificate not verified by all browsers. Is this related to my CA or just misconfiguration?
I got the solution from Dave Thompson's answer, thanks a lot for that!
I just had to go to www.whatsmychaincert.com/?angola.sytes.net, there I saw that my certificate chain was wrong. Actually I did ...
1
vote
Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?
Ok I think that I have found the answer to my question. It all comes down to my company using Zscaler.
It is said in the doc that :
ZIA
acts as an inline proxy: Zscaler terminates the original ...
1
vote
Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?
Whitelists on public HTTP(S) based APIs are usually layer 2, i.e. they care for the (public) IP address(es) which is trying to make a connection. I would have a hard time believing they would care for ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
tls × 5563certificates × 1231
encryption × 529
certificate-authority × 520
http × 467
openssl × 467
man-in-the-middle × 421
authentication × 334
public-key-infrastructure × 320
web-browser × 234
cryptography × 216
web-application × 177
x.509 × 150
proxy × 147
network × 125
vpn × 117
cipher-selection × 113
tls-intercept × 110
diffie-hellman × 103
webserver × 97
rsa × 87
email × 86
chrome × 85
hsts × 85
dns × 80