New posts in Tls

What are the differences of checking a self-signed certificate vs ignore it?

Is OCSP Request Signing Necessary?

Security vulnerabilities of POST over SSL

Why does SSL Labs now consider CBC suites weak?

Outlook for Android uses intermediate Microsoft Servers

Does client have to send the CA chain along with the client certificate after ServerHello?

Should I use HTTPS on a domain that will only be used for redirection?

Let's Encrypt and EV certificates for different hosts in the same domain

Who is responsible for choosing a TLS cipher suite - the client or the server?

What are the 'P' values in some cipher string?