RRONI DAS14h ago 路 7 min readA certificate authority's private key was the number 4. We checked.A private key for a certificate authority on the P-384 curve should be a random number more than 100 digits long. On Saturday 17 October, a researcher reported that eight of eMudhra's intermediate CA systemdesignacademy.hashnode.dev
BBookMyHostOct 14 路 4 min readWorks on desktop, fails on phones: the post-quantum TLS bug hiding in your network cardModern browsers now send a larger TLS hello. On some Windows servers, a receive-offload bug in the network card silently breaks about half of those connections. Here is how to spot it, why it happens,bookmyhost.hashnode.dev
RrathsaraSep 22 路 15 min readHiding Network Connections: Encryption, Onion Routing, and Identity SpoofingNetwork logs from an organisation's perimeter tell an analyst a great deal without capturing a single byte of payload: which hosts communicated, when, over which ports, for how long, and how much datarr-cyber.hashnode.dev
SSupun WimalasenaSep 17 路 9 min readHow Custom Domains Work in Hyvor BlogsOriginally published on hyvor.com/blog Hyvor Blogs, our blogging platform, comes with support for custom domains. From an end-user standpoint, configuring a custom domain is straightforward. However, hyvor-engineering.hashnode.dev
BBikash ShawSep 15 路 15 min readComputer Networks #15: TLS CertificateIn the previous blog, we saw how the TLS handshake establishes an encrypted connection between a client and a server. But there is an important problem hiding inside that process. Suppose I visit: httbackendblogs.hashnode.dev
JJAY TANKSep 11 路 7 min readThe cheapest outage to prevent is an expired TLS certificate. leafwatch makes sure you see it coming.Every few months a household-name company takes an outage because a TLS certificate quietly expired. Not a subtle race condition, not a novel exploit - a date passed. The fix was known in advance, dowjaytank.hashnode.dev
ZZero Trust ThreadsSep 7 路 6 min readWhat Actually Happens When You Type a URL Into Your Browser?You type a website address into your browser and press Enter. A moment later, the page appears. It feels almost instantaneous. Behind that simple action, however, several technologies may work togethezerotrustthreads.hashnode.dev
VVlada GavriliucSep 2 路 5 min readYour SSH and TLS Setup Is About to Become "Legally Obsolete"If you work with infrastructure, SSL certificates, SSH keys, or any system that relies on cryptography, you've probably heard the term "post-quantum cryptography" floating around for the past year. Bu1procurementdatareviewb.hashnode.dev
BBikash ShawAug 31 路 10 min readComputer Networks #14: SSL/TSL Handshake We have already discussed how the transport layer protocol and application layer protocols work under the hood. But there is one very important thing we have not discussed yet: How is all of this commbackendblogs.hashnode.dev
LLuis BalderaAug 26 路 4 min readTLS using CaddyWe will use Caddy as a TLS/HTTPS reverse proxy in front of services like CasaOS or any other local web applications. Here鈥檚 how that works: 馃攼 How Caddy Provides TLS Automatic HTTPS: Caddy can automalbcyberdefense.hashnode.dev