New posts in Tls

How can I securely develop a local webapp at a coffee shop?

Why use HTTPS Everywhere when we have HSTS supported browsers?

Risks of explicitly trusting SSL certificate vs relying on certificate chain for validation?

Why should I offer HTTP in addition to HTTPS?

Should I reject a CSR when the host emailed me the private key for SSL certificate request?

Why are SSL certificates an annual expense?

Is a secure cookie without the HttpOnly flag a problem?

Dealing with SSL Certificates on Products

Hide clear SNI when using https

Can SSL be used to encrypt non-HTTP data?