Network Working Group O. Friel Internet-Draft R. Barnes Intended status: Standards Track M. Pritikin Expires: May 3, 2018 Cisco October 30, 2017 Application-Layer TLS draft-friel-tls-over-http-00 Abstract Many clients need to establish secure connections to application services but face challenges establishing these connections due to the presence of middleboxes that terminate TLS connections from
tlsに関するJxckのブックマーク (98)
-
Jxck 2017/10/31
-
Update to our TLS 1.0 and 1.1 deprecation plan
Why?ProductsServicesSolutionsDevsPartnersResourcesPricing & Activation Update to our TLS 1.0 and 1.1 deprecation planNote: here's the latest update to our TLS 1.0 deprecation plan. Last year, we announced our deprecation plan for TLS 1.0 and 1.1 with a timeline that was driven by the PCI DSS v3.1 standard. Since our original post, the PCI Security Standards Council has updated their guidance and n
-
GitHub - google/ssl_logger: Decrypts and logs a process's SSL traffic.
geffner@ubuntu:~$ # Make a local pipe for input to our openssl client geffner@ubuntu:~$ mkfifo pipe geffner@ubuntu:~$ # Create our openssl client, which will receive input from our pipe geffner@ubuntu:~$ openssl s_client -ign_eof -connect example.org:443 > /dev/null 2> /dev/null < pipe & [1] 98954 geffner@ubuntu:~$ # Begin writing the request to our pipe geffner@ubuntu:~$ printf "GET / HTTP/1.0\nH
-
Finding Ticketbleed
09 Feb 2017 Finding Ticketbleed Ticketbleed (CVE-2016-9244) is a software vulnerability in the TLS stack of certain F5 products that allows a remote attacker to extract up to 31 bytes of uninitialized memory at a time, which can contain any kind of random sensitive information, like in Heartbleed. If you suspect you might be affected by this vulnerability, you can find details and mitigation instr
-
SSL Pulseデータの推移 (SSL Pulse Trends)
SSL Pulseのサイト評価グレードの分布の推移 SSL Pulse ではSSLの設定の安全レベルであるグレードをAからFで評価しています。 その分布の推移をグラフにしました。2014年2月には大きく評価方法が変わったようです。 その途中でも脆弱性の評価項目が随時追加され、評価値が見直されているようです。 SSL/TLSに関連した脆弱性の未対応推移 RC4ストリーム暗号の危殆化やPOODLEの影響など、公開された脆弱性の影響を受けるサイトの比率をグラフにしています。上に行くほど脆弱性の影響を受けるサイトの比率が多いという意味です。多くの脆弱性対応は徐々に対策され、徐々に比率が下がってくるのですが、BEASTに関してだけ、リスクを受容するという方向にあり、影響を受けるサイトが増えています。
-
Bulletproof TLS and PKI | Feisty Duck
Last update: January 2022 Digital formats: PDF, EPUB (no DRM) Print length: 512 pages ISBN: 978-1907117091 Technical reviewers: Emily Stark and Matt Caswell You are about to undertake a journey into the mysterious world of cryptography. If you are like me, and you find the experience equal parts challenging and rewarding, you may stay on this journey long after you finish reading this book. I am w
-
Etsy Engineering | How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern
In April of 2016 Etsy launched Pattern, a new product that gives Etsy sellers the ability to create their own hosted e-commerce website. With an easy-setup experience, modern and stylish themes, and guest checkout, sellers can merchandise and manage their brand identity outside of the Etsy.com retail marketplace while leveraging all of Etsy’s e-commerce tools. The ability to point a custom domain
-
Lesser HTTPS for non-browsers
An HTTPS client needs to do a whole lot of checks to make sure that the remote host is fine to communicate with to maintain the proper high security levels. In this blog post, I will explain why and how the entire HTTPS ecosystem relies on the browsers to be good and strict and thanks to that, the rest of the HTTPS clients can get away with being much more lenient. And in fact that is good, becaus
-
-
-
Engadget | Technology News & Reviews
The best of CES 2025Presenting our 12 finalists, plus the winner of our best in show award.
-
-
-
The HTTPS-Only Standard - The HTTPS-Only Standard
The American people expect government websites to be secure and their interactions with those websites to be private. This site contains a web-friendly version of the White House Office of Management and Budget memorandum M-15-13, “A Policy to Require Secure Connections across Federal Websites and Web Services”, and provides technical guidance and best practices to assist in its implementation. Go
-
Certificate Transparency : Certificate Transparency
Working together to detect maliciously or mistakenly issued certificates. An ecosystem that makes the issuance of website certificates transparent and verifiable. To the participants of the Certificate Transparency (CT) ecosystem, who give their time, expertise, and resources to help keep the web secure. Thank you. Certificates, encryption, and secure communication Certificate Transparency (CT) si
-
AWSにおけるSSL証明書の基本的な取扱い | 外道父の匠
多くの企業が、今年中にWebサービスの暗号化を進めなくてはいけなくなったかと思います。 Webに接続するiOSアプリは2017年1月からHTTPSの使用が絶対条件になる、デベロッパーはご注意を | TechCrunch Japan ということで、基本的な内容ではありますが、AWSにおけるSSL証明書の扱いについて復習してみます。 AWSで扱う証明書の種類 ここでいう種類とは、EV SSL だの ワイルドカードだの、証明書の製品としての種類ではありません。 １つは AWS Certificate Manager（以下、ACM）の無償証明書、もう１つは従来のSSLサーバ証明書販売サイトで購入する有償証明書、の２種類となります。 それぞれの証明書を、AWSのリソースにどのように登録し、運用していくかについてまとめていきます。 ACMの証明書を利用する 2016年1月にリリースされ、5月にはTok
-
-
35% of websites still using insecure SHA-1 certificates - Help Net Security
Please turn on your JavaScript for this page to function normally. 35 percent of the world’s websites are still using insecure SHA-1 certificates, according to Venafi. This is despite the fact that leading browser providers, such as Microsoft, Mozilla and Google, have publicly stated they will no longer trust sites that use SHA-1 from early 2017. By February 2017, Chrome, Firefox and Edge, will ma
-
BearSSL - Main
Overview BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) written in C. It aims at offering the following features: Be correct and secure. In particular, insecure protocol versions and choices of algorithms are not supported, by design; cryptographic algorithm implementations are constant-time by default. Be small, both in RAM and code footprint. For instance, a minimal server imple
-
Web over HTTPS
Web over HTTPS DevFest Tokyo 2016 #devfest16 2016/10/0
公式Twitter
- @HatenaBookmark
リリース、障害情報などのサービスのお知らせ
- @hatebu
最新の人気エントリーの配信
キーボードショートカット一覧
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Copyright © 2005-2025 Hatena. All Rights Reserved.
設定を変更しました