Posts Tagged TLS

7 results.

TLS vs SSL: What Is The Right Choice?

Dec12
by Ike on December 12, 2022 at 4:20 pm
Posted In: Plesk, Releases, secure web server, SSL, SSL Certificate, SSL certificate tips, TLS, Various

Meet TLS and SSL: two protocols designed for the safe, secure authentication and transportation of data online. Is one better than the other? And if so, why? In this in-depth guide, we will explore the most important differences between both protocols, how they can connect to HTTPS effectively, and why end-users may not necessarily have to stress over the difference too much. TLS vs SSL: Understanding the Differences and Similarities Transport Layer Security (TLS) and Secure Socket Layers (SSL) are cryptographic protocols built to securely transport Internet data by encrypting it and authenticating connections. Why do these matter? Let’s say…

The post TLS vs SSL: What Is The Right Choice? appeared first on Plesk.

└ Tags: , , , , ,
 Comment 

Google’s POODLE affects oodles

Oct15
by Ike on October 15, 2014 at 10:45 am
Posted In: Around the Net, security

97% of SSL web servers are likely to be vulnerable to POODLE, a vulnerability that can be exploited in version 3 of the SSL protocol. POODLE, in common with BEAST, allows a man-in-the-middle attacker to extract secrets from SSL sessions by forcing the victim’s browser into making many thousands of similar requests. As a result […]

└ Tags: , , , , ,
 Comment 

Netcraft releases Heartbleed indicator for Chrome, Firefox, and Opera

Apr17
by Ike on April 17, 2014 at 8:58 am
Posted In: Netcraft Services, security

The Netcraft Extension: Heartbleed and phishing protection rolled into one The Heartbleed bug affected around 17% of all trusted SSL web servers when it was announced a week ago.
The critical vulnerability in the OpenSSL cryptographic library has the potential to allow attackers to retrieve private keys and ultimately decrypt a server’s encrypted traffic or even impersonate […]

└ Tags: , , , , ,
 Comment 

Half a million widely trusted websites vulnerable to Heartbleed bug

Apr08
by Ike on April 8, 2014 at 3:22 pm
Posted In: security

A serious overrun vulnerability in the
OpenSSL cryptographic library affects around 17% of SSL web servers which use certificates issued by trusted certificate authorities. Already commonly known as the
Heartbleed bug, a missing bounds check in the handling of the TLS heartbeat extension can allow remote attackers to view up to 64 kilobytes of memory on an […]

└ Tags: , , , ,
 Comment 

Debian: 2837-1: openssl: programming error

Jan10
by Ike on January 10, 2014 at 1:40 pm
Posted In: Other

(Jan 7) Anton Johannson discovered that an invalid TLS handshake package could crash OpenSSL with a NULL pointer dereference. The oldstable distribution (squeeze) is not affected. [More…]

└ Tags: , ,
 Comment 

Debian: 2702-1: telepathy-gabble: TLS verification bypass

Jun05
by Ike on June 5, 2013 at 3:33 pm
Posted In: Other

(Jun 3) Maksim Otstavnov discovered that the Wocky submodule used by telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, does not respect the tls-required flag on legacy Jabber servers. A network intermediary could use this vulnerability to bypass [More…]

└ Tags: , ,
 Comment 

Debian: 2697-1: gnutls26: out-of-bounds array read

May30
by Ike on May 30, 2013 at 2:17 pm
Posted In: Other

(May 29) It was discovered that a malicious client could crash a GNUTLS server and vice versa, by sending TLS records encrypted with a block cipher which contain invalid padding. [More…]

└ Tags: ,
 Comment 

52 queries. 8.75 mb Memory usage. 0.237 seconds.