Z.T.'s user avatar
Z.T.'s user avatar
Z.T.'s user avatar
Z.T.
  • Member for 9 years, 1 month
  • Last seen this week
0 votes

Is This Perfect Forward Secrecy?

9 votes

DHE_DSS vs. DHE_RSA

1 vote

Why does TLS use two separate sequence numbers?

3 votes

Is setting up a CA server necessary when all I want is to test HTTPS for a web project on localhost?

3 votes

TLS 1.3 Cipher Suites: authentication algorithm unspecified?

0 votes

x509 chain verification which fields are sufficient

1 vote

testssl not detecting all cipher suites

6 votes

How to find and disable specific ciphers on Linux?

5 votes
Accepted

Got a warning message - remote authentication changed. Should I be worried?

6 votes

Can the secret be derived from the checksum? Should the checksum be encrypted?

0 votes

Collision probability between truncating vs subsequencing of SHA256 hash to 128 bits?

6 votes
Accepted

Can a UUID or GUID be matched back to the originating computer?

1 vote

SHA256 for hashing 32 cryptographicaly random bytes

4 votes

Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?

4 votes
Accepted

Is this wireshark capture using TLS 1.2 or 1.3?

9 votes

Is it safe to ignore/override TLS warnings if user doesn't enter passwords or other data?

1 vote

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

7 votes
Accepted

Can we add TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 on windows server 2012 using gpedit although not supported by windows OS by default?

19 votes
Accepted

Difference between SSH-keys and password-based authentication

2 votes
Accepted

Openssl and Let's Encrypt Cert Chain

1 vote
Accepted

How to decrypt HTTPS traffic with tshark when I have the .key and .crt file?

12 votes
Accepted

SSH Server Configuration Best Practices?

2 votes
Accepted

Is it unsafe to publish your nginx configs?

4 votes

Is it possible to update the contact info (FN/LN, OU, Organization,..) of a certificate?

5 votes

Wireshark - How to monitor TLS traffic from a malware? (It does not write into the SSLKEYLOGFILE)

2 votes

Is there any good security reason to add a VPN tunnel to encapsulate an existing HTTPS traffic between an IoT device and a web server?

7 votes
Accepted

Does TLS fall back to unauthenticated key exchange if the CA is not known to the client?

1 vote
Accepted

Is the Amazon S3 Pre-Signed URL protected from brute force attack?

2 votes
Accepted

Diffie–Hellman key exchange in TLS 1.3

1 vote

Check signature of an HTTPS response

1
2 3 4 5
7