HorstKevin's user avatar
HorstKevin's user avatar
HorstKevin's user avatar
HorstKevin
  • Member for 8 years, 11 months
  • Last seen more than a month ago
43 votes
1 answer
74k views

Chrome >50: Where can I see the negotiated cipher suite?

37 votes
3 answers
23k views

How can I see which sites have set the HSTS flag in my browser?

23 votes
5 answers
10k views

CSP allowing all Google domains?

9 votes
1 answer
10k views

How to determine if mail was encrypted during transport using the header information?

8 votes
2 answers
10k views

Why is Chrome saying that "TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)" is an obsolete cipher suite?

6 votes
2 answers
3k views

What are the performance differences (for client and server) between DHE and ECDHE in TLS?

5 votes
1 answer
2k views

Content-Security-Policy: Getting weird reports with frame-ancestors 'self'

4 votes
2 answers
2k views

CSP: upgrade-insecure-requests - what happens with https-incompatible ressources?

3 votes
2 answers
2k views

How can SHA256-hashes as input to MD5 be revealed?

3 votes
1 answer
1k views

What cipher suites do Mail Clients (Thunderbird, Outlook, ...) support?

1 vote
2 answers
2k views

What does "This request does not comply with Chrome's Certificate Transparency policy." in Chrome's Security Tab mean?

0 votes
3 answers
1k views

Can a password change via CSRF lead to account takeover?