Z.T.'s user avatar
Z.T.'s user avatar
Z.T.'s user avatar
Z.T.
  • Member for 7 years, 6 months
  • Last seen this week
48 votes

Can you sign using a digital certificate itself?

38 votes

Should I be using ECDSA keys instead of RSA?

37 votes
Accepted

Is there any point in having the HSTS header enabled when using HTTP/2?

20 votes
Accepted

RSA key exchange

19 votes
Accepted

Difference between SSH-keys and password-based authentication

13 votes
Accepted

What information does ssh -vvv expose?

13 votes
Accepted

Is OpenSSL used in production?

12 votes
Accepted

Why is one of three browsers (Chromium) reporting an invalid HTTPS certificate?

11 votes
Accepted

What is ECDH public server param reuse?

9 votes
Accepted

Is the ACME HTTP-01 challenge secure against MITMs?

9 votes
Accepted

Is it possible to store / record HTTPS client auth traffic as a signed document?

9 votes

DHE_DSS vs. DHE_RSA

9 votes

Is it safe to ignore/override TLS warnings if user doesn't enter passwords or other data?

8 votes
Accepted

Details of TLS certificate verification

8 votes
Accepted

When does chrome generate the prime number for TLS communication?

7 votes
Accepted

How does MariaDB's ed25519 auth scheme work?

7 votes

Can an eavesdropper detect the use of a TLS client-side certificate?

7 votes
Accepted

Does client send request to CA when SSL handshaking?

7 votes
Accepted

How to simply check if a certificate has the OCSP must-staple attribute?

6 votes
Accepted

Different SSL cert behavior with Chrome on desktop vs. Chrome on iOS

6 votes

How AWS access key id and secret access key are generated internally

6 votes
Accepted

Man-in-the-middle attacks in end-to-end encryption

6 votes
Accepted

is the certificate signature a hash of just the public key?

6 votes
Accepted

Can we add TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 on windows server 2012 using gpedit although not supported by windows OS by default?

6 votes
Accepted

SSH Server Configuration Best Practices?

6 votes
Accepted

Does TLS fall back to unauthenticated key exchange if the CA is not known to the client?

5 votes

Wireshark - How to monitor TLS traffic from a malware? (It does not write into the SSLKEYLOGFILE)

5 votes
Accepted

Algorithm and key size to choose for SSL certificates (security and CPU wise) in 2020 (using nginx)

5 votes
Accepted

What's the point of S/MIME?

5 votes

Does the "Key Encipherment" key usage make sense when using ECDH P384?

1
2 3 4 5 6