Z.T.'s user avatar
Z.T.'s user avatar
Z.T.'s user avatar
Z.T.
  • Member for 9 years, 1 month
  • Last seen this week
6 votes
Accepted

Algorithm and key size to choose for SSL certificates (security and CPU wise) in 2020 (using nginx)

5 votes
Accepted

OpenSSH: Meaning of cipher with email address @openssh.com

5 votes
Accepted

Got a warning message - remote authentication changed. Should I be worried?

5 votes

Does the "Key Encipherment" key usage make sense when using ECDH P384?

5 votes
Accepted

What's the point of S/MIME?

5 votes
Accepted

How to verify Diffie Hellman uses a "Safe" prime

5 votes
Accepted

Can you decrypt a TLS stream byte by byte?

5 votes

Wireshark - How to monitor TLS traffic from a malware? (It does not write into the SSLKEYLOGFILE)

4 votes

Is it possible to update the contact info (FN/LN, OU, Organization,..) of a certificate?

4 votes
Accepted

Is it possible to use TLS 1.3 without ESNI?

4 votes
Accepted

Is this wireshark capture using TLS 1.2 or 1.3?

4 votes

Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?

4 votes

Performance comparison between AES256 GCM vs AES 256 SHA 256

4 votes

Is it possible that a single handshake can have 2 TLS versions included?

4 votes
Accepted

How to interpret security impact of "Server Signature Algorithms" (sslscan)

4 votes
Accepted

Why would one disable a new TLS version by default?

4 votes

Using SSH as Telnet

4 votes

What happens once a vulnerability has been added to a database? (CVE)

4 votes

How to make TLS_RSA_WITH_3DES_EDE_CBC_SHA strong

4 votes

Why did TLS 1.3 drop AES-CBC?

4 votes
Accepted

Why do we use Oauth2 instead of Basic Auth in server to server communication using SSL?

4 votes

Asymmetric/Symmetric Encryption of a TPM key hierarchy

4 votes

Is there a SSLv2 document?

4 votes

RSA and Psuedorandom Number Generator

4 votes
Accepted

How to use testssl.sh on an SMTP server?

4 votes

How secure are TOTP codes?

4 votes

Why does pinning a CA root certificate not present a security risk?

4 votes

An alternative for /dev/urandom

4 votes

Why is the Diffie-Hellman exchange not enough to authenticate the communication partners in IKE_SA_INIT?

4 votes

Is there any CBC based ciphersuite which are secure for known attacks like LUCKY13?

1
2
3 4 5
7