Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Tls, Https, Certificate. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Cybersecurity, Privacy, Technology ... > Cybersecurity, Encryption, Malware,... > Encryption, Cybersecurity, TLS/SSL,... > Tls, Https, Certificate

Articles

Security.txt file now mandatory for Dutch government websites

See discussion (154 comments, 357 points) - Archive

Calling time on DNSSEC: The costs exceed the benefits

See discussion (177 comments, 115 points) - Archive

Mailbox.org discovers unencrypted password transmission in myMail

See discussion (29 comments, 83 points) - Archive

Why TLS is better without STARTTLS (2021)

See discussion (27 comments, 81 points) - Archive

HTTPS explained with carrier pigeons (2018)

See discussion (18 comments, 95 points) - Archive

Wi-Fine

See discussion (56 comments, 89 points) - Archive

Decrypting your own HTTPS traffic with Wireshark

See discussion (98 comments, 531 points) - Archive

Fighting TLS Fingerprinting with Node.js

See discussion (14 comments, 85 points) - Archive

SAML Is Insecure by Design

See discussion (180 comments, 300 points) - Archive

Adventures in Fuzzing Matrix’s Encryption

See discussion (12 comments, 98 points) - Archive

Secure your MQTT server with authentication and encryption

See discussion (29 comments, 88 points) - Archive

Website Fingerprinting on Early QUIC Traffic

See discussion (123 comments, 338 points) - Archive

Advice to avoid public Wi-Fi is mostly out of date

See discussion (114 comments, 206 points) - Archive

The “security.txt” proposal reached last step in the IETF process

See discussion (89 comments, 221 points) - Archive

Show HN: Differential Fuzzing of Cryptographic Libraries

See discussion (12 comments, 84 points) - Archive

Vulnerabilities exploited in VPN products used worldwide

See discussion (133 comments, 233 points) - Archive

DNSCrypt encrypts communications between a DNS client and a DNS resolver

See discussion (60 comments, 101 points) - Archive

Spying on HTTPS

See discussion (115 comments, 257 points) - Archive

TLS 1.3 is going to save us all, and other why IoT is still insecure (2017)

See discussion (26 comments, 94 points) - Archive

New Tools for Detecting HTTPS Interception

See discussion (65 comments, 213 points) - Archive

ETS Isn't TLS and You Shouldn't Use It

See discussion (109 comments, 224 points) - Archive

Deep packet inspection is dead, and here's why (2017)

See discussion (121 comments, 159 points) - Archive

HTTPS in the real world

See discussion (26 comments, 162 points) - Archive

SMTP MTA Strict Transport Security (MTA-STS)

See discussion (39 comments, 93 points) - Archive

Breaking LTE on Layer Two

See discussion (24 comments, 148 points) - Archive

STARTTLS Everywhere

See discussion (99 comments, 190 points) - Archive

TLS 1.3 and Proxies

See discussion (144 comments, 304 points) - Archive

Key compromise and root cert with exposed key in German lawyer software (beA)

See discussion (20 comments, 84 points) - Archive

Guide to avoiding vulnerabilities in programming languages [pdf]

See discussion (9 comments, 94 points) - Archive

HTTPS Interception Weakens TLS Security

See discussion (98 comments, 215 points) - Archive

Google and Mozilla's message to AV and security firms: Stop trashing HTTPS

See discussion (109 comments, 226 points) - Archive

The Security Impact of HTTPS Interception [pdf]

See discussion (65 comments, 160 points) - Archive

Open source collaboration across agencies to improve HTTPS deployment

See discussion (19 comments, 104 points) - Archive

Curl Security Audit

See discussion (39 comments, 283 points) - Archive

Announcing SSL Labs Grading Changes for 2017

See discussion (47 comments, 122 points) - Archive

Industry Concerns about TLS 1.3

See discussion (186 comments, 313 points) - Archive

HEIST: HTTP Encrypted Information Can Be Stolen Through TCP-Windows [pdf]

See discussion (59 comments, 129 points) - Archive

Internet Draft: SMTP Strict Transport Security

See discussion (99 comments, 188 points) - Archive

Let’s Encrypt Now Being Abused by Malvertisers

See discussion (69 comments, 86 points) - Archive

The sad state of SMTP encryption

See discussion (62 comments, 164 points) - Archive

Cookies Lack Integrity: Real-World Implications

See discussion (63 comments, 128 points) - Archive

The Freak Attack SSL/TLS Vulnerability

See discussion (116 comments, 292 points) - Archive

Major security flaw undermines Apple and Google users, researchers discover

See discussion (23 comments, 91 points) - Archive

TLS in HTTP/2

See discussion (33 comments, 93 points) - Archive

Against DNSSEC

See discussion (144 comments, 186 points) - Archive

ISPs Removing Their Customers' Email Encryption

See discussion (126 comments, 333 points) - Archive

TripIt insecurely broadcasts sensitive travel details in calendar feeds

See discussion (68 comments, 184 points) - Archive

Mandatory encryption on XMPP starts today

See discussion (98 comments, 191 points) - Archive

Confirming Consensus on removing RSA key Transport from TLS 1.3

See discussion (9 comments, 85 points) - Archive

Tarsnap: No heartbleed here

See discussion (53 comments, 222 points) - Archive

Npm security post-mortem

See discussion (63 comments, 188 points) - Archive

Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

See discussion (302 comments, 515 points) - Archive

Moving forward on improving HTTP's security

See discussion (237 comments, 489 points) - Archive

How secure is HTTPS today? How often is it attacked? (2011)

See discussion (20 comments, 127 points) - Archive

SSL: Intercepted today, decrypted tomorrow

See discussion (87 comments, 231 points) - Archive

Https URLs posted in private Skype chats visited by Microsoft

See discussion (176 comments, 334 points) - Archive

How to implement HTTPS in an insufficient manner

See discussion (64 comments, 135 points) - Archive

Crack in Internet's foundation of trust allows HTTPS session hijacking

See discussion (32 comments, 162 points) - Archive

Lessons in website security anti-patterns by Tesco

See discussion (118 comments, 352 points) - Archive

Sovereign Keys, EFF's proposal to replace the certificate authority model

See discussion (10 comments, 127 points) - Archive

SSL broken. (TLS 1.0 cryptographic attack that works. Not just fake certs.)

See discussion (84 comments, 281 points) - Archive

Microsoft Shuts off HTTPS in Hotmail for Over a Dozen Countries

See discussion (43 comments, 179 points) - Archive

Reminder: "Broken gets fixed, but shitty lasts forever"

See discussion (34 comments, 169 points) - Archive

How we applied fuzzing techniques to cURL

See discussion (58 comments, 305 points) - Archive

A Gentle Introduction to SAML

See discussion (95 comments, 244 points) - Archive

Show HN: A fake SMTP server for software integration testing

See discussion (49 comments, 127 points) - Archive

Vulnerabilities show why STARTTLS should be avoided if possible (2021)

See discussion (64 comments, 104 points) - Archive