Elektrine
Log in Register

#tls

24 posts · Last used 9d

Andreas Grupp :tux: :opensuse: @angry@social.tchncs.de
· 1w ago
Skeptische Blicke beim #Stalwart-Vortrag am #LinuxDayAT – denn Mailserver-Installation und -Betrieb gelten als kompliziert. Bei Stalwart offenbar nicht. 😉 @opensourceuser@mastodon.social, 16 Jahre alt, hatte meinen Vortrag beim #CLT26 gesehen und die Installation direkt ausprobiert. Ergebnis: ein eigener, funktionierender Mailserver! 🎉 Anschließend haben wir anhand von https://www.hardenize.com noch den letzten Feinschliff besprochen: #DNSSEC, #MTA-STS, #TLS-RPT und #DANE. Gerade nachgeschaut: Alles umgesetzt! 🎉 Besser geht's nicht. Solche Erfolgserlebnisse geben Energie für die nächsten Vorträge. ❤️
hardenize.com

Hardenize: Comprehensive web site configuration test

Hardenize provides a comprehensive and free assessment of web site network and security configuration.

14
3
7
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 1w ago
wolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now. #wolfSSL #wolfSSLVulnerabilities #TLS #AuthenticationBypass #EmbeddedSecurity #Cryptography #IoTSecurity #PatchNow https://securityonline.info/wolfssl-5-9-4-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws
Daily CyberSecurity

wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws

wolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now.

0
0
0
0
🏳️‍⚧️ Christin Löhner 🏳️‍🌈 @christin@lsbt.me
· 2mo ago
Hab da mal was gebastelt... man hat am Wochenende ja nichts Besseres zu tun: Secure Your ServerZwei praktische Checks. Ein seriöser Sicherheitsbericht. Prüfe eine Domain auf die Härtungsdetails, auf die Angreifer und Audits zuerst schauen. Teste danach, ob deine echten E-Mails sauber authentifiziert und zugestellt werden. Kein Konto, kein Tracking, keine Bezahlschranke. Domain-Sicherheitsscan Vollständige externe Sicht auf TLS/SSL, SSH, offene Ports, DNS, SPF, DKIM, DMARC, MTA-STS, HTTP-Security-Header, WHOIS und PGP/WKD. Mail-Zustellungstest Erzeuge eine einmalige Testadresse, schick eine Mail aus deinem Postfach und sieh SPF, DKIM, DMARC, TLS, rDNS, Spam-Signale und Zustellungsdetails. Bugs, Verbesserungswünsche bitte an "hallo [at] chrislo.de" Mehr Infos: https://www.sichere-deinen-server.de/ #chrislo #sys #secureyourserver #sicheredeinenserver #sicherheit #security #server #domain #tls #ssh
Kostenloser Domain- & Mail-Sicherheitsscan | Secure Your Server
Secure Your Server

Kostenloser Domain- & Mail-Sicherheitsscan | Secure Your Server

Kostenloser Domain-Sicherheitsscan: TLS/SSL, SSH, Ports, DNS, SPF/DKIM/DMARC/MTA-STS, HTTP-Header. Kein Konto, keine Bezahlschranke, kein Tracking.

19
1
12
0
Ian Kluft ✅✈️🎈🌋 @ikluft@avgeek.social
· 2mo ago
Replying to
#Airbus A350-1000ULR test flight from Toulouse🇫🇷 #TLS / #LFBO non-stop for 19 hours to Melbourne🇦🇺 #MEL / #YMML was flown on Friday, July 24. https://www.flightaware.com/live/flight/AIB35LR/history/20260723/0530Z/LFBO/YMML #aviation #travel #avgeek
FlightAware

4Y35LR (AIB35LR) Airbus Industrie Flight Tracking and History 23-Jul-2026 (TLS / LFBO-MEL / YMML) - FlightAware

Flight status, tracking, and historical data for Airbus Industrie 35LR (4Y35LR/AIB35LR) 23-Jul-2026 (TLS / LFBO-MEL / YMML) including scheduled, estimated, and actual departure and arrival times.

1
8
2
0
Ian Kluft ✅✈️🎈🌋 @ikluft@avgeek.social
· 2mo ago
Replying to
#Airbus A350-1000ULR test flight is currently returning from Melbourne🇦🇺 #MEL / #YMML to Toulouse🇫🇷 #TLS / #LFBO going eastbound with favorable winds to make a one-stop-around-the-world test. Later they will also need to test westbound Australia to Europe against unfavorable winds. https://www.flightaware.com/live/flight/AIB35LR/history/20260727/0700Z/YMML/LFBO #aviation #travel #avgeek
FlightAware

4Y35LR (AIB35LR) Airbus Industrie Flight Tracking and History 27-Jul-2026 (MEL / YMML-TLS / LFBO) - FlightAware

Flight status, tracking, and historical data for Airbus Industrie 35LR (4Y35LR/AIB35LR) 27-Jul-2026 (MEL / YMML-TLS / LFBO) including scheduled, estimated, and actual departure and arrival times.

2
7
2
0
Ian Kluft ✅✈️🎈🌋 @ikluft@avgeek.social
· 2mo ago
"Airbus Tests A350-1000ULR With First Flight to Australia" by AirlineGeeks / Zach Vasile - #Airbus test pilots flew a prototype A350-1000ULR (ultra long range) from the Airbus factory in Toulouse🇫🇷 #TLS / #LFBO non-stop for 19 hours to Melbourne🇦🇺 #MEL / #YMML. This test verifies ULR can achieve its purpose for launch customer Qantas🦘: non-stop flight between Western #Europe and Eastern #Australia with margin to route around weather and war zones. https://airlinegeeks.com/2026/07/27/airbus-tests-a350-1000ulr-with-first-flight-to-australia/ #aviation #travel #avgeek
Airbus Tests A350-1000ULR With First Flight to Australia | AirlineGeeks.com
AirlineGeeks.com |

Airbus Tests A350-1000ULR With First Flight to Australia | AirlineGeeks.com

Airbus' A350-1000ULR touched down in Australia for the first time on Friday as the type continues flight testing ahead of planned deliveries to Qantas.

6
9
6
0
Marin Ivezic @infosec@defcon.social
· 2mo ago
Can't migrate everything to PQC at once. Which layer first? TLS at the load balancer, IPsec at the tunnel, or application-layer encryption - each covers different threat surfaces. Six enterprise architecture scenarios, one recommendation per scenario. https://postquantum.com/post-quantum/pick-one-pqc-layer-migration/ #PQC #TLS #IPsec #infosec #cryptography
Pick One Layer First for Your Post-Quantum Migration
PostQuantum.com

Pick One Layer First for Your Post-Quantum Migration

How to choose the single post-quantum layer that protects the most data. Six enterprise scenarios analyzed with practical migration guidance.

0
0
3
0
joepie91 needs to say yes to more things (🔜 eth0) @joepie91@fedi.slightly.tech
· 2mo ago
I've republished to Codeberg my ca-incidents list, a permanent record of security/trust incidents involving SSL/TLS Certificate Authorities, because continuous scrutiny is important for the trust in the system: https://codeberg.org/joepie91/ca-incidents It hasn't been updated in quite a while (last update was in 2016), and I'm sure that more things will have happened since, so please submit a PR if you know of any incidents to add! #ProjectToot #TLS
codeberg.org
0
0
0
0
John Kristoff @jtk@infosec.exchange
· 15mo ago

Weekend Reads

#RPKI #Taiwan #China #AppleWatch #TLS

PQC for the RPKI
RIPE Labs

PQC for the RPKI

Future capabilities of quantum attackers will present a host of new vulnerabilities for RPKI. A research student from SIDN Labs presents the first work on post-quantum cryptography for the RPKI, establishing the foundation for making this critical Internet infrastructure quantum-safe.

2
0
2
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT. #RabbitMQ #AuthBypass #TLS #OAuth2 #InfoSec https://securityonline.info/rabbitmq-authentication-bypass-flaws/?utm_source=mastodon&utm_medium=jetpack_social
RabbitMQ Patches Two Critical Authentication Bypass Flaws
Daily CyberSecurity

RabbitMQ Patches Two Critical Authentication Bypass Flaws

Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT.

0
0
0
0
CertKit @certkit@infosec.exchange
· 2mo ago
If you learned the TLS handshake from a textbook, half the steps no longer happen. No ClientKeyExchange. No 37 cipher suites. No secret on the wire. Attacks removed them one by one. https://www.certkit.io/blog/tls-handshake-explained #TLS #SysAdmin
How the TLS handshake works, and why half of it is gone
CertKit SSL Certificate Management

How the TLS handshake works, and why half of it is gone

Every HTTPS connection starts with a TLS handshake. It's a lot shorter than it used to be because twenty years of attacks removed a lot of insecure steps.

2
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
A widespread OpenSSL error handling flaw makes apt fail HTTPS in FIPS mode. A stale error queue entry gets misread as fatal. Audit your code. #OpenSSL #ErrorHandling #FIPS #apt #Debian #TLS #CyberSecurity #InfoSec https://securityonline.info/openssl-error-handling-apt-fips/?utm_source=mastodon&utm_medium=jetpack_social
OpenSSL Error Handling Defect Breaks apt HTTPS Access in FIPS Mode
Daily CyberSecurity

OpenSSL Error Handling Defect Breaks apt HTTPS Access in FIPS Mode

A widespread OpenSSL error handling flaw makes apt fail HTTPS in FIPS mode. A stale error queue entry gets misread as fatal. Audit your code.

0
0
0
0
C. @cazabon@mindly.social
· 3mo ago
Replying to
@djb@mastodon.cr.yp.to They're also getting really testy about us "regular Joes" showing up and voting against publication of the deliberately-weak solo PQ recommendation. You can practically feel their frustration - "We stuffed this list to pass this vote, and they're stuffing it against us!". The blatant hypocrisy of the "not standards-track" thing bugged me too when it came through the list. Anyone who follows me and cares about cryptography or their privacy: read djb's short blurb here: https://nsa.2026.action.cr.yp.to/ There's action you can take to try to prevent the NSA's attempt to get the world to standardize on deliberately weakened cryptography in TLS - i.e. the thing that protects every important web connection on the planet. They have form for doing this in the past, and are trying again. There are other links in the above page for more information. #TLS #HTTP #HTTPS #cryptography #privacy
nsa.2026.action.cr.yp.to
5
0
5
0
Wish the sun to stand still 🌞 @tasket@infosec.exchange
· 3mo ago
RE: https://mas.to/@nemo/116864001224955528 NSA involved in "off the rails" warrant-less mass surveillance. This (and the fact that their chain of command was purged by the Trump regime) should be factored into the debate around the IETF relying on the NSA's input. If your position is that a simple RFC is "not a big deal" then IDK why you're making a big deal out of people like @djb@mastodon.cr.yp.to being against it. #FISA #crypto #ietf #tls #pqc #privacy #surveillance
mas.to

:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉: "#America's Secret #Database #FISA #Privacy #Secur…" - mas.to

1
0
2
0