user avatar
user avatar
user avatar
user53029
  • Member for 8 years
  • Last seen more than a month ago
53 votes
3 answers
54k views

4096 bit RSA encryption keys vs 2048

36 votes
5 answers
25k views

SSL root certificate optional?

34 votes
1 answer
72k views

Can a CSR be created in OpenSSL with SHA2?

25 votes
3 answers
13k views

Is SHA1 weak for SSL?

15 votes
3 answers
2k views

Trying to understand why signatures in root certs "are not used"?

12 votes
3 answers
1k views

How will SHA1 deprecation affect internal CA's?

9 votes
2 answers
2k views

How are browsers able to find and construct an alternate trusted chain path?

5 votes
1 answer
3k views

How will SHA1 deprecation affect SHA1 roots in OS/Browser trust stores.

5 votes
1 answer
957 views

Is CVE-2013-2566 a practical attack against RC4 or still conceptual?

5 votes
2 answers
839 views

Can CVE-2015-7704 - ntpd kiss-of-death affect NTP time servers or just clients?

3 votes
1 answer
618 views

Does TLS fallback only keep from downgrades to SSLv3?

3 votes
2 answers
902 views

Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?

3 votes
1 answer
4k views

ECDSA/RSA certificates and cipher selection

3 votes
1 answer
6k views

Bitdefender Antivirus SSL Cert substitution

3 votes
1 answer
172 views

Best email SPF practice for dispersed users?

2 votes
2 answers
573 views

If TLS compression is not supported is a site still vulnerable to attacks such as BREACH?

2 votes
2 answers
5k views

ECDSA ciphers and forward secrecy question about key exchange

2 votes
1 answer
20k views

What is the deal with Valicert SSL root certificates?

2 votes
2 answers
2k views

Why is a CSR hashed?

2 votes
1 answer
378 views

Has CVE-2014-6271 Shell Shock been mitigated completely what is the latest? [closed]

2 votes
1 answer
408 views

Why are CA's now signing root certs with SHA2?

2 votes
1 answer
2k views

Can Cipher Suites defined in TLSv1.2 be negotiated by clients that only support TLSv1.0?

2 votes
1 answer
833 views

Poodle - possible to protocol downgrade if SSLv3 is disabled but still have SSLv3 ciphers enabled?

2 votes
1 answer
461 views

Can TLS fallback work with server side support only?

2 votes
1 answer
439 views

Can TLSv1.0 ciphers be used with SSLv3?

1 vote
2 answers
1k views

How to test the php vulnerability CVE-2014-3515

1 vote
1 answer
3k views

Same certificate but different private keys on different servers. Does this work?

1 vote
1 answer
247 views

Should self signed wildcard certs be used?

1 vote
2 answers
2k views

Why does IP address need to be listed as a DNS name in SAN/UCC certs?

1 vote
2 answers
281 views

Will CA's still validate internal IP's in SSL certs?