This is a good time to offer a reminder that the CASC has a great tool for secure server testing, the [SSL Server Test][1]. The tool grades your server installation and reviews …
PKI Consortium blog
Posts by tag RC4
Details surrounding the [SWEET32: Birthday attacks on 64 bit block ciphers in TLS and OpenVPN][1] can be found in the paper released by Karthikeyan Bhargavan and Gaëtan Leurent …
Looking Back at 2015 A number of new tactics proved 2015 was no exception to an active year defending against ever increasing security issues. Vendors found new and creative way…
Attack
All the major browsers provide “security user interface”, meaning visual elements to inform the user of the security of their connection to the web page they’re visiting. Up unt…
Recent revelations from Edward Snowden about pervasive government surveillance have led to many questions about the safety of communications using the SSL/TLS protocol. Such com…
Last year, Edward Snowden, an American computer specialist working as a contractor for the National Security Agency (“NSA”), shocked web users around the world by publicizing do…
Code Signing
Looking Back at 2013 Protocol Attacks The year started with a couple of SSL/TLS protocol attacks: [Lucky Thirteen][1] and [RC4 attack][2]. Lucky Thirteen allows the decryption o…
Attack
In a previous post titled [Getting the Most Out of SSL Part 2][1] , we touched on the recommendation that Web servers be configured to prefer Transport Layer Security (TLS) vers…
They say the most complicated skill is to be simple; despite SSL and HTTPS having been around for a long time, they still are not as simple as they could be. One of the reasons …
The [latest published attacks][1] target specific algorithms used within SSL/TLS. Those algorithms are used when a client connects to a server via SSL/TLS; they’re not used when…
