User user53029

53 votes

3 answers

54k views

4096 bit RSA encryption keys vs 2048

asked Aug 11, 2014 at 23:10

36 votes

5 answers

25k views

SSL root certificate optional?

tls certificates public-key-infrastructure certificate-authority

asked Aug 13, 2014 at 19:11

34 votes

1 answer

72k views

Can a CSR be created in OpenSSL with SHA2?

certificates public-key-infrastructure certificate-authority openssl

asked Aug 13, 2014 at 3:32

25 votes

3 answers

13k views

Is SHA1 weak for SSL?

encryption tls certificates sha

asked Sep 16, 2014 at 14:25

15 votes

3 answers

2k views

Trying to understand why signatures in root certs "are not used"?

encryption tls hash certificates sha

asked Sep 17, 2014 at 8:31

12 votes

3 answers

1k views

How will SHA1 deprecation affect internal CA's?

tls certificates web-browser public-key-infrastructure sha

asked Sep 20, 2014 at 11:54

9 votes

2 answers

2k views

How are browsers able to find and construct an alternate trusted chain path?

tls certificates web-browser

asked Jul 31, 2014 at 19:34

5 votes

1 answer

3k views

How will SHA1 deprecation affect SHA1 roots in OS/Browser trust stores.

tls certificates certificate-authority sha

asked Nov 23, 2014 at 19:40

5 votes

1 answer

957 views

Is CVE-2013-2566 a practical attack against RC4 or still conceptual?

tls attacks cipher-selection rc4

asked Jun 11, 2015 at 23:02

5 votes

2 answers

831 views

Can CVE-2015-7704 - ntpd kiss-of-death affect NTP time servers or just clients?

linux known-vulnerabilities ntp

asked Oct 30, 2015 at 13:23

3 votes

1 answer

610 views

Does TLS fallback only keep from downgrades to SSLv3?

tls attacks openssl cipher-selection

asked Feb 6, 2015 at 21:45

3 votes

2 answers

902 views

Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?

encryption tls attacks protocols cipher-selection

asked Oct 21, 2014 at 10:58

3 votes

1 answer

3k views

ECDSA/RSA certificates and cipher selection

certificates public-key-infrastructure openssl rsa cipher-selection

asked Aug 18, 2014 at 1:04

3 votes

1 answer

6k views

Bitdefender Antivirus SSL Cert substitution

tls cryptography certificates antivirus

asked Aug 3, 2014 at 19:30

3 votes

1 answer

172 views

Best email SPF practice for dispersed users?

email email-spoofing spf

asked Sep 10, 2016 at 13:17

2 votes

2 answers

572 views

If TLS compression is not supported is a site still vulnerable to attacks such as BREACH?

encryption tls attacks http attack-vector

asked Sep 5, 2014 at 10:53

2 votes

2 answers

5k views

ECDSA ciphers and forward secrecy question about key exchange

encryption tls cryptography certificates public-key-infrastructure

asked Aug 20, 2014 at 12:42

2 votes

1 answer

20k views

What is the deal with Valicert SSL root certificates?

tls cryptography certificates public-key-infrastructure certificate-authority

asked Aug 15, 2014 at 21:11

2 votes

2 answers

2k views

Why is a CSR hashed?

hash certificates openssl digital-signature

asked Aug 13, 2014 at 5:20

2 votes

1 answer

377 views

Has CVE-2014-6271 Shell Shock been mitigated completely what is the latest? [closed]

linux vulnerability shellshock bash

asked Sep 25, 2014 at 19:28

2 votes

1 answer

408 views

Why are CA's now signing root certs with SHA2?

tls certificates public-key-infrastructure certificate-authority sha

asked Sep 26, 2014 at 22:28

2 votes

1 answer

2k views

Can Cipher Suites defined in TLSv1.2 be negotiated by clients that only support TLSv1.0?

encryption tls cipher-selection

asked Oct 15, 2014 at 23:21

2 votes

1 answer

833 views

Poodle - possible to protocol downgrade if SSLv3 is disabled but still have SSLv3 ciphers enabled?

tls attacks openssl cipher-selection

asked Oct 17, 2014 at 11:25

2 votes

1 answer

459 views

Can TLS fallback work with server side support only?

tls attacks openssl cipher-selection

asked Dec 2, 2014 at 18:13

2 votes

1 answer

435 views

Can TLSv1.0 ciphers be used with SSLv3?

tls cipher-selection

asked Dec 28, 2014 at 15:50

1 vote

2 answers

1k views

How to test the php vulnerability CVE-2014-3515

linux php known-vulnerabilities

asked Feb 19, 2015 at 20:14

1 vote

1 answer

3k views

Same certificate but different private keys on different servers. Does this work?

tls certificates public-key-infrastructure

asked Apr 27, 2016 at 19:45

1 vote

1 answer

247 views

Should self signed wildcard certs be used?

tls certificates public-key-infrastructure

asked Jul 13, 2015 at 15:29

1 vote

2 answers

2k views

Why does IP address need to be listed as a DNS name in SAN/UCC certs?

tls certificates

asked Nov 19, 2014 at 4:45

1 vote

2 answers

281 views

Will CA's still validate internal IP's in SSL certs?

tls certificates certificate-authority

asked Nov 19, 2014 at 4:48

Stack Exchange Network

current community

your communities

more stack exchange communities

43 Questions

4096 bit RSA encryption keys vs 2048

SSL root certificate optional?

Can a CSR be created in OpenSSL with SHA2?

Is SHA1 weak for SSL?

Trying to understand why signatures in root certs "are not used"?

How will SHA1 deprecation affect internal CA's?

How are browsers able to find and construct an alternate trusted chain path?

How will SHA1 deprecation affect SHA1 roots in OS/Browser trust stores.

Is CVE-2013-2566 a practical attack against RC4 or still conceptual?

Can CVE-2015-7704 - ntpd kiss-of-death affect NTP time servers or just clients?

Does TLS fallback only keep from downgrades to SSLv3?

Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?

ECDSA/RSA certificates and cipher selection

Bitdefender Antivirus SSL Cert substitution

Best email SPF practice for dispersed users?

If TLS compression is not supported is a site still vulnerable to attacks such as BREACH?

ECDSA ciphers and forward secrecy question about key exchange

What is the deal with Valicert SSL root certificates?

Why is a CSR hashed?

Has CVE-2014-6271 Shell Shock been mitigated completely what is the latest? [closed]

Why are CA's now signing root certs with SHA2?

Can Cipher Suites defined in TLSv1.2 be negotiated by clients that only support TLSv1.0?

Poodle - possible to protocol downgrade if SSLv3 is disabled but still have SSLv3 ciphers enabled?

Can TLS fallback work with server side support only?

Can TLSv1.0 ciphers be used with SSLv3?

How to test the php vulnerability CVE-2014-3515

Same certificate but different private keys on different servers. Does this work?

Should self signed wildcard certs be used?

Why does IP address need to be listed as a DNS name in SAN/UCC certs?

Will CA's still validate internal IP's in SSL certs?