Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich
  • Member for 9 years, 7 months
  • Last seen more than a week ago
18 votes
Accepted

is TLS compression used in modern browsers?

16 votes
Accepted

Why is PerfectForwardSecrecy considered OK, when it has same defects as salt-less password hashing?

12 votes

For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?

8 votes
Accepted

Are TLS 1.2 AES-CBC and AES-GCM Authenticated Encryption ciphersuites?

7 votes

PKPA to Supercede TLS/AES etc?

7 votes
Accepted

ECC certificate works with all browsers and ssl labs- but not chrome

6 votes
Accepted

Is more ECDHE or RSA currently recommended?

5 votes
Accepted

How does TLS 1.3 provide authentication without using the public key to verify that the server has a private key?

5 votes

Can one passively load-balance HTTPS traffic based on TLS SNI?

5 votes
Accepted

What should be broken to break a cipher with perfect forward secrecy?

5 votes

What key is used to encrypt the certificate and certificate verify message in TLS1.3?

4 votes

How will be cipher selected when client is running on version TLS 1.3 and server is running on TLS 1.2?

3 votes

Use of extra AES on top of SSL protocol

3 votes
Accepted

What is the Peer Signing digest on an OpenSSL s_client connection?

3 votes

Does adding more letters provide added security compared to a standard substitution cipher?

2 votes

How does the TLS Client Hello message choose the TLS version?

2 votes

Akamai's Legacy SSL/TLS Cipher Profiles

2 votes

Is encrypted e-mail sent over TLS 1.3 a form of "forward secrecy" (similar to something like Signal)?

2 votes

How to check that you got the right key when brute forcing an encryption?

2 votes
Accepted

Why has SSL v3 not yet been upgraded to a higher version with stronger principles, what are the dependencies and issues to do so?

2 votes
Accepted

Strength of TLS handshake

2 votes

What is a size of mac_length and mac_key_length for TLS cipher suites HMAC using SHA384 and SHA512?

2 votes

Does the server signs message body after ssl handshake?

1 vote
Accepted

Is it necessary to have a certificate when we use TLS

1 vote

Can TLS session resumption work after client dropped connection & reconnected to server?

1 vote

Why is the server's public key always used in SSL encryption and never the client's public key?

1 vote

Chrome TLS 1.3 no TLS resumption with not secure connections

0 votes
Accepted

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

0 votes

How does the birthday paradox apply to random keys?