New posts in Tls

What prevents me from buying a SSL certificate for a domain I don't control?

What are the use cases for anonymous SSL cipher suites?

Can I read the domain name from HTTPS before SSL handshake?

Explain to non tech savvy person how to check that your connection to mybank.com is safe?

Why doesn't the HTTP/2 spec require TLS?

Is it ok to have self-signed certificates in source control?

Can we drop XP from HTTPS support? If not, when?

Password hashing on frontend or backend?

Relatively secure faster alternative for HTTPS

SSL Newbie : Does HTTPS client also need a certificate?