New posts in Tls

Why do browsers default to http: and not https: for typed in URLs?

Extract pre-master keys from an OpenSSL application

Data Security on a Malicious WiFi Network

Smart Card for RSA private key for SSL?

Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?

Is SSL dying? Should I buy SSL certificates for my sites any more?

Why is 'avast! Web/Mail Shield Root' listed as CA for google.com?

What's the difference between X.509 and PKCS#7 Certificate?

Is TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 a safe cipher suite to use?

Is publishing CRLs over HTTP a potential vulnerability?