Skip to main content
blabla_trace's user avatar
blabla_trace's user avatar
blabla_trace's user avatar
blabla_trace
  • Member for 6 years, 3 months
  • Last seen more than 5 years ago
awarded
awarded
awarded
comment
Is it possible to determine the specific version of a website's web server?
We can not say with certainty what data the web server would return. If there's a better way to determine the true version rather then some random data, please feel free to share.
comment
Is it possible to determine the specific version of a website's web server?
@SteffenUllrich Yes, you're absolutely right but the OP is asking if there is a way, not whether it is reliable but as you have already stated the information returned might be true, might be completely wrong or not present at all but on the other hand we could also assume that the web app is behind a proxy :-)
Loading…
revised
Loading…
revised
Loading…
Loading…
awarded
comment
are session key generated during RSA key exchange mode ephemeral
Or does ephemeral in the context of RSA mean that it would require a NEW RSA key-pair (pub-priv) for EACH SINGLE connection establishment (TCP 3 Way - TLS handshake) ?
comment
are session key generated during RSA key exchange mode ephemeral
Thank you. So I guess it is safe to say that RSA in TLS is ephermal because it generates for each session a random number thus computing a unique symmetric session key from it for each connection but it does not provide Perfect Forward Secrecy because once the servers private key is compromised all the previously captured and encrypted traffics can now be decrypted basically nullifying the value of using ephemeral session keys? Or am I still mixing things up ?
awarded
awarded
revised
Changing the SSL certificate chain
added 126 characters in body
Loading…
answered
Loading…
Loading…
Loading…
answered
Loading…
awarded