New answers tagged tls
2
votes
Accepted
Why is TLS communication within a VPC important?
If an attacker compromises a system in the VPC or part of the underlying network infrastructure then the lack of TLS may allow them to read or modify traffic. And since you don't know that two hosts ...
- 7,176
0
votes
how to import a private key in windows
I used CertUtil -repairstore command on my newly downloaded Godaddy certificate, and it works.
https://www.azurehowtos.com/2023/04/assign-private-key-to-new-any-new.html
- 1
-1
votes
How does SSLstrip work?
The goal of the SSLstrip attack is to prevent the client from switching from http to https. Historically on the web there were two main ways the website(s) could cause the user to switch from http to ...
- 5,046
0
votes
Accepted
crt.sh shows certificates for domains I don't recognize
I believe I've discovered the answer. The common denominator for all these domains appears to be that they use Zoho email. Each of the domains I tested resolves to Zoho, so presumably the certificates ...
- 101
1
vote
Any tool that can prevent ISP from knowing which websites we visit? beside tor?
Two methods that are commonly used to prevent ISP's from monitoring the sites that users connect to are VPN's and TOR.
With a VPN, the ISP can see that the user is using a VPN. Also, the VPN provider ...
- 22.1k
0
votes
Any tool that can prevent ISP from knowing which websites we visit? beside tor?
The ISP needs to know where you are connecting to (let it be the website or a VPN), since it needs to route the traffic to the destination.
When using a VPN, the traffic between you and the VPN is ...
- 937
2
votes
Accepted
How to set/modify "positive trust attributes" in a certificate for openssl
In my question I stated that "there is no information about how to set" trust attributes. This is not correct as man openssl-x509 describes how to set these attributes:
-addtrust arg
...
- 83
2
votes
Accepted
TLS session ticket vs pre-shared key state management
According to RFC8446 section 4.6.1:
ticket: The value of the ticket to be used as the PSK identity. The
ticket itself is an opaque label. It MAY be either a database
lookup key or a self-encrypted ...
- 1,170
1
vote
Accepted
TLS 1.3 record version for application data
... do the application data records use 0x0304 as the version?
No. The standard (RFC 8446) is very clear what the version of the record layer should be, and this includes application records:
...
- 196k
1
vote
Why does TLS use two separate sequence numbers?
Because the two sides don't take turns transmitting. Both sides transmit at the same time.
- 8,364
1
vote
Accepted
Why does TLS use two separate sequence numbers?
TLS is for bidirectional traffic, i.e. there are separate data streams for each direction which can have a different position in the data stream. That's why one also needs two sequence numbers to ...
- 196k
1
vote
Accepted
Benefits of VPN vs. HTTPS + DoH + ECH for Corporate Network Security
note that all my applications are web based and also everything is on the cloud
Based on this statement I assume that you care only about traffic from inside the company to some services in the cloud....
- 196k
3
votes
Can OpenSSL vulnerabilities be mitigated by Load Balancer service from Cloud Providers
Specifically, AWS Application Load Balancer does run at the level of Layer 7 (HTTP/HTTPS).
Application Load Balancer operates at the request level (layer 7), routing traffic to targets (EC2 instances,...
- 3,039
6
votes
Accepted
Can OpenSSL vulnerabilities be mitigated by Load Balancer service from Cloud Providers
If the load balancer terminates TLS (like in Layer 7 load balancing) then this will mitigate these bugs in your application since there will be (depending on the configuration) no TLS spoken between ...
- 196k
Top 50 recent answers are included