SSL, TLS and HTTPS

Most recent stories in SSL, TLS and HTTPS

• 

  Bruce Morton

  Using Caddy with Google Trust Services | UNMITIGATED RISK

  unmitigatedrisk.com - rmhrisk

  Caddy is a powerful and easy-to-use web server that can be configured to use a variety of certificate authorities (CA) to issue SSL/TLS certificates. …

• 

  Bruce Morton

  

  SSL Review: November 2022 - Entrust Blog

  entrust.com - Bruce Morton

  The Entrust monthly SSL review covers TLS/SSL discussions — recaps, news, trends, and opinions from the industry. Entrust Trust Service Forum …

• 

  Bruce Morton

  

  SSL Review: December 2022 - Entrust Blog

  entrust.com - Bruce Morton

  The Entrust monthly SSL review covers SSL/TLS discussions — recaps, news, trends, and opinions from the industry. Entrust Hardenize advises states …

• ZeroSSL: XSS leading to session hijacking, stealing a private key (and a password hash)

  

  Bruce Morton

  ZeroSSL: XSS leading to session hijacking, stealing a private key (and a password hash)

  google.com

  Michal Špaček Jan 19, 2023, 12:06:09 PM (22 hours ago) Jan 19 to CCADB Public Hi all, I've discovered a Cross-Site Scripting (XSS) vulnerability at …

• Breaking RSA with a Quantum Computer

  

  Bruce Morton

  

  Breaking RSA with a Quantum Computer

  schneier.com - Bruce Schneier

  A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is …

• The SSL Certificate Issuer Field is a Lie

  

  Bruce Morton

  The SSL Certificate Issuer Field is a Lie

  agwa.name - Andrew Ayer

  A surprisingly hard, and widely misunderstood, problem with SSL certificates is figuring out what organization (called a certificate authority, or CA) …