SSL/TLS
This blog was originally posted on staysafeonline.org on June 29, 2015. Online payments can be made in a variety of ways, but majority of the online financial transactions are d…
As one dog says to the other in Peter Steiner’s classic New Yorker cartoon– “On the Internet, nobody knows you’re a dog.” Software downloaded from the Internet is similar to peo…
OpenSSL has announced a high severity vulnerability, CVE 2015 1793 which will require an upgrade to some OpenSSL installations. The vulnerability was discovered by Google person…
Last week I attended and presented at the National Institute of Standards and Technology (NIST) [Workshop on Elliptic Curve Cryptography Standards][1]. In NIST’s words, “The wor…
Recently, we read about lots of SSL/TLS related vulnerabilities found in mobile apps, which should come as no surprise. We were warned about this back in 2012 (see [these][1] [s…
On June 2, 2015, Facebook announced that it would stop supporting Facebook connected apps that were signed with SHA 1, as of October 1, 2015. “These changes are part of a broade…
You have a dilemma. You want to continue to deploy your web service but are running out of IPv4 addresses. You consider deploying multiple virtual servers that will use the same…
Another flaw has been found in the basic encryption algorithms that secure the Internet. This flaw, named the Logjam attack by its discoverers (researchers from various universi…
The group that manages the Payment Card Industry Data Security Standard quietly announced in February that an imminent update was coming to its payment card and application requ…
Announcement
Since we last [wrote about SSL/TLS performance][1], there has been a lot of activity in the IETF HTTP Working Group, resulting in the February announcement that the next version…
