2
votes
TLSv1: should DHE be enabled?
It looks like dbheater attack is the reason why DHE ciphers are disabled on most popular sites.
There are some discussions about how serious this threat is:
https://github.com/mozilla/ssl-config-...
- 141
2
votes
Accepted
Is this wireshark capture using TLS 1.2 or 1.3?
Look at ServerHello message, in its extensions, does it have a "supported_versions" extension? In that, the server indicates TLS1.3. If it's not present then it's TLS1.2. See the RFC.
- 7,598
1
vote
Accepted
Why is my website certificate not verified by all browsers. Is this related to my CA or just misconfiguration?
I got the solution from Dave Thompson's answer, thanks a lot for that!
I just had to go to www.whatsmychaincert.com/?angola.sytes.net, there I saw that my certificate chain was wrong. Actually I did ...
- 203
1
vote
Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?
Ok I think that I have found the answer to my question. It all comes down to my company using Zscaler.
It is said in the doc that :
ZIA
acts as an inline proxy: Zscaler terminates the original ...
- 111
1
vote
Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?
Whitelists on public HTTP(S) based APIs are usually layer 2, i.e. they care for the (public) IP address(es) which is trying to make a connection. I would have a hard time believing they would care for ...
- 818
Only top scored, non community-wiki answers of a minimum length are eligible