Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs
Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich
  • Member for 9 years, 10 months
  • Last seen this week
2 votes
Accepted

How to process received 'new_session_ticket' message in TLS 1.3?

18 votes
Accepted

is TLS compression used in modern browsers?

6 votes
Accepted

How does TLS 1.3 provide authentication without using the public key to verify that the server has a private key?

2 votes

How does the TLS Client Hello message choose the TLS version?

0 votes
Accepted

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

1 vote

Chrome TLS 1.3 no TLS resumption with not secure connections

1 vote

Why is the server's public key always used in SSL encryption and never the client's public key?

6 votes
Accepted

Is more ECDHE or RSA currently recommended?

2 votes

Is encrypted e-mail sent over TLS 1.3 a form of "forward secrecy" (similar to something like Signal)?

1 vote
Accepted

Is it necessary to have a certificate when we use TLS

3 votes

Does adding more letters provide added security compared to a standard substitution cipher?

12 votes

For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?

16 votes
Accepted

Why is PerfectForwardSecrecy considered OK, when it has same defects as salt-less password hashing?

4 votes

How will be cipher selected when client is running on version TLS 1.3 and server is running on TLS 1.2?

5 votes

What key is used to encrypt the certificate and certificate verify message in TLS1.3?

2 votes

Does the server signs message body after ssl handshake?

8 votes
Accepted

Are TLS 1.2 AES-CBC and AES-GCM Authenticated Encryption ciphersuites?

2 votes

What is a size of mac_length and mac_key_length for TLS cipher suites HMAC using SHA384 and SHA512?

5 votes
Accepted

What should be broken to break a cipher with perfect forward secrecy?

3 votes
Accepted

What is the Peer Signing digest on an OpenSSL s_client connection?

3 votes

Use of extra AES on top of SSL protocol

7 votes
Accepted

ECC certificate works with all browsers and ssl labs- but not chrome

7 votes

PKPA to Supercede TLS/AES etc?

2 votes

Akamai's Legacy SSL/TLS Cipher Profiles

1 vote

Can TLS session resumption work after client dropped connection & reconnected to server?

2 votes

How to check that you got the right key when brute forcing an encryption?

5 votes

Can one passively load-balance HTTPS traffic based on TLS SNI?

0 votes

How does the birthday paradox apply to random keys?

2 votes
Accepted

Strength of TLS handshake

2 votes
Accepted

Why has SSL v3 not yet been upgraded to a higher version with stronger principles, what are the dependencies and issues to do so?