Hardening Your Web Server’s SSL Ciphers
There are many wordy articles on configuring your web server’s TLS ciphers. This is not one of them. Instead, I will share a configuration that scores a straight “A” on Qualys’s SSL Server Test in 2023. Disclaimer: I’m updating this post continually to represent what I consider the best practice at the moment – there are way too many dangerously outdated articles about TLS-deployment out there alr
SSL broken. (TLS 1.0 cryptographic attack that works. Not just fake certs.) | Hacker News
I happen to know the details of this attack since I work on Chrome's SSL/TLS stack.The linked article is sensationalist nonsense, but one should give the authors the benefit of the doubt because the press can be like that. Fundamentally there's nothing that people should worry about here. Certainly it's not the case that anything is 'broken'. But http://eprint.iacr.org/2006/136 sure looks like a r
How To Verify SSL Certificate From A Shell Prompt - nixCraft
How do I verify and diagnosis SSL certification installation from a Linux / UNIX shell prompt? How do I validate SSL Certificate installation and save hours of troubleshooting headaches without using a browser? How do I confirm I’ve the correct and working SSL certificates? OpenSSL comes with a generic SSL/TLS client which can establish a transparent connection to a remote server speaking SSL/TLS.
matt blags
found things(197 days)hazards of love(708 days)iworkforapple(539 days)javascript(573 days)slippycomics(396 days)startup(389 days)technobabble(6 hours) background What do you use to serve content over SSL? mod_ssl? nginx compiled with ssl support? stunnel? A hardware accelerator-jigger? I benchmarked a few SSL terminators in front of haproxy last week. The results may (or may not) surprise you. ini
Mac users listen up! Enable certificate checking
I hope you've all heard of the events leading to certificate authority Comodo incorrectly issuing SSL server certificates for some high profile web sites. This is disconcerting news, compounded by an announcement yesterday from hacker Ich Sun who claims to have breached a second CA. If there is a silver lining, Comodo's provided details of the incident, including the affected domain names and seri
OpenSSL memory use in Node.js | Paul Querna
Last Thursday I went to the Joyent office for Node Office Hours — I wanted to talk to Isaac about running a private NPM registry. Isaac answered my questions about private NPM registries, but Matt Ranney explained a more interesting problem. He was dialed into a conference call line for Node Office hours (he is currently living in Hawaii.) Matt explained that he is using the new TLS module in Node
ImperialViolet - Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.) The ‘S’ in HTTPS stands for ‘secure’ and the security is provided by SSL/TLS. SSL/TLS is a standard network protocol which is implemented in every browser and web server to provide confidentiality and integrity for HTTPS traffic. If there's one point tha
SSLを要求するとSSLできないわけがないのに、Cookieを見つけると、非SSLにリダイレクトしちゃうダメサイトもあるって話 - 気晴日記
SSLを要求するとSSLできないわけがないのに、Cookieを見つけると、非SSLにリダイレクトしちゃうダメサイトもあるって話 あんまりこういうのは記事化したくないんだけどさ。 とあるサイトのはなし。 ＃ココログ管理サイトではない。今のココログ管理サイトはもっと酷い。 https://～を要求すると、ちゃんと暗号化ページを表示できるのに、1度でもログインしてしまうと、それの痕跡がCookieに残っているため、ログアウトさせるためなのか知らないけど、http:://～にリダイレクトさせる、そんなサイトがある。 サイト運営者に問い合わせたこともあるけど、仕様ですみたいな回答しかもらえなかった。 ”運営者側が隠蔽すべきと判断した情報”にアクセスする際には認証＆暗号化するから問題ないとも書いてあったけど。 こういうクソサイトつくったやつも、運営して平気な顔してるやつも、馬鹿じゃなかろうか。 知らず
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
SSL Server Test (Powered by Qualys SSL Labs)
https://www.webopius.com/content/355/getting-mamp-working-with-ssl-on-os-x
Testing HTTPS files with MAMP