Hot answers tagged

2 votes

TLSv1: should DHE be enabled?

It looks like dbheater attack is the reason why DHE ciphers are disabled on most popular sites. There are some discussions about how serious this threat is: https://github.com/mozilla/ssl-config-...
user avatar
  • 141
2 votes
Accepted

Is this wireshark capture using TLS 1.2 or 1.3?

Look at ServerHello message, in its extensions, does it have a "supported_versions" extension? In that, the server indicates TLS1.3. If it's not present then it's TLS1.2. See the RFC.
user avatar
  • 7,598
1 vote
Accepted

Why is my website certificate not verified by all browsers. Is this related to my CA or just misconfiguration?

I got the solution from Dave Thompson's answer, thanks a lot for that! I just had to go to www.whatsmychaincert.com/?angola.sytes.net, there I saw that my certificate chain was wrong. Actually I did ...
user avatar
  • 203
1 vote

Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?

Ok I think that I have found the answer to my question. It all comes down to my company using Zscaler. It is said in the doc that : ZIA acts as an inline proxy: Zscaler terminates the original ...
user avatar
1 vote

Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?

Whitelists on public HTTP(S) based APIs are usually layer 2, i.e. they care for the (public) IP address(es) which is trying to make a connection. I would have a hard time believing they would care for ...
user avatar
  • 818

Only top scored, non community-wiki answers of a minimum length are eligible