User Lekensteyn

66 votes

Accepted

What clients are proven to be vulnerable to Heartbleed?

answered Apr 9, 2014 at 14:08

63 votes

Decrypting TLS in Wireshark when using DHE_RSA ciphersuites

answered Sep 13, 2013 at 7:27

29 votes

Accepted

Extract pre-master keys from an OpenSSL application

answered Jan 27, 2015 at 14:22

27 votes

Accepted

Is it possible to see a packet before encryption?

answered Dec 25, 2016 at 15:54

21 votes

Accepted

Why do Firefox and Chrome "leak" critical security information out of the browser and how can I stop it?

answered Jan 12, 2016 at 21:09

19 votes

I accidentally published my SSH key passphrase, what to do?

answered Apr 4, 2015 at 17:59

16 votes

Accepted

Firefox bug permits stealing encrypted passwords: How is this possible?

answered Aug 18, 2019 at 11:19

15 votes

Accepted

Extracting openssl pre-master secret from apache2

answered Aug 16, 2019 at 9:27

15 votes

Accepted

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

answered Aug 7, 2020 at 10:46

13 votes

Accepted

What's eating my entropy? Or what does entropy_avail really show?

answered Jun 19, 2016 at 21:13

13 votes

stronger encryption for SSH keys

answered Mar 2, 2014 at 21:45

11 votes

Accepted

Does Heartbleed affect servers if OpenSSL was only used to generate the certificate?

answered Apr 9, 2014 at 16:13

11 votes

Accepted

Check logs for Heartbleed exploit use?

answered Apr 11, 2014 at 12:37

8 votes

Best way to allow sudo access when using ssh keys

answered Oct 5, 2013 at 18:06

8 votes

Accepted

Log all crypto keys used for outgoing SSL / TLS connections on Linux server

answered Oct 22, 2015 at 20:51

7 votes

Is storing answers to security questions in plain text bad form?

answered Aug 17, 2012 at 20:00

7 votes

How dangerous is referencing a variable out of its lifetime

answered May 7, 2016 at 20:59

6 votes

Is the Extended Key Usage extension mandatory on the web?

answered Dec 28, 2017 at 21:51

6 votes

Accepted

AirPcap is end-of-availability. What alternatives do you recommend?

answered Mar 23, 2018 at 0:45

6 votes

SSL/TLS Certificate Update?

answered Aug 13, 2015 at 14:46

5 votes

How to pass cipher list to OpenSSL s_client

answered Jul 5, 2015 at 13:32

5 votes

Heartbleed - Read only the next 64k and hyping the threat

answered Apr 11, 2014 at 20:42

5 votes

Accepted

Firefox sending Application Data in middle of SSL handshake

answered Apr 26, 2018 at 9:33

4 votes

Does the SSL record protocol encrypt the handshake protocol too?

answered Nov 23, 2019 at 23:15

4 votes

Is SYN DDoS the only type of TCP DDoS?

answered Dec 27, 2017 at 20:59

4 votes

How to extract session key from trace file?

answered Mar 19, 2018 at 0:55

4 votes

Accepted

What lies behind this complicated shellcode on linux?

answered Mar 17, 2017 at 22:33

4 votes

Accepted

Lots of TLSCiphertext length MUST NOT exceed 2^14 + 2048 in wireshark

answered Feb 19, 2020 at 21:07

4 votes

TLS reliance on System Time

answered Oct 22, 2014 at 15:10

4 votes

OVPN Connections vulnerable to Heart Bleed?

answered Apr 9, 2014 at 14:46

Stack Exchange Network

58 Answers

What clients are proven to be vulnerable to Heartbleed?

Decrypting TLS in Wireshark when using DHE_RSA ciphersuites

Extract pre-master keys from an OpenSSL application

Is it possible to see a packet before encryption?

Why do Firefox and Chrome "leak" critical security information out of the browser and how can I stop it?

I accidentally published my SSH key passphrase, what to do?

Firefox bug permits stealing encrypted passwords: How is this possible?

Extracting openssl pre-master secret from apache2

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

What's eating my entropy? Or what does entropy_avail really show?

stronger encryption for SSH keys

Does Heartbleed affect servers if OpenSSL was only used to generate the certificate?

Check logs for Heartbleed exploit use?

Best way to allow sudo access when using ssh keys

Log all crypto keys used for outgoing SSL / TLS connections on Linux server

Is storing answers to security questions in plain text bad form?

How dangerous is referencing a variable out of its lifetime

Is the Extended Key Usage extension mandatory on the web?

AirPcap is end-of-availability. What alternatives do you recommend?

SSL/TLS Certificate Update?

How to pass cipher list to OpenSSL s_client

Heartbleed - Read only the next 64k and hyping the threat

Firefox sending Application Data in middle of SSL handshake

Does the SSL record protocol encrypt the handshake protocol too?

Is SYN DDoS the only type of TCP DDoS?

How to extract session key from trace file?

What lies behind this complicated shellcode on linux?

Lots of TLSCiphertext length MUST NOT exceed 2^14 + 2048 in wireshark

TLS reliance on System Time

OVPN Connections vulnerable to Heart Bleed?