Hot Topics

TLS 1.3

TLS 1.3 vs TLS 1.2

Enabling TLS 1.3 Certificate – Are You Ready for Moving Forward?

| | Application Security, TLS 1.2 certificate, TLS 1.3, TLS 1.3 Certificate, TLS 1.3 Vs TLS 1.2
Businesses are often reluctant to embrace new technologies due to assumed dependencies, perceived complications, and unclear information about the advantages. Digital communication security is not exempt from this happening and. The post ...
Indusface
Unbelievable moment clever racoon cracks locked bin in SECONDS

Raccoon Attack: Researchers Find A Vulnerability in TLS 1.2

| | Everything Encryption, Industry Lowdown, Monthly Digest, POODLE, Raccoon, TLS 1.2, TLS 1.3
Bad news: there’s a vulnerability in TLS 1.2. Good news: researchers say it’s “very hard to exploit” and major vendors have already released security patches for it. A team of... The post ...
Hashed Out by The SSL Store™
DNS over TLS and DNS over HTTPS

DNS over TLS and DNS over HTTPS

| | Brave, Chrome, CloudFlare, Cobalt Strike, Command And Control, Corelight Labs, dns, DoH, DoT, Firefox, Godlua, goDoH, HTTPS, json, json+https, Malware, network security monitoring, network traffic analysis, opera, PsiXbot, TLS, TLS 1.3, Zeek
By Jamie Brim, Corelight Security Researcher In this post, we’ll explore DNS over TLS (DoT) and DNS over HTTPS (DoH). DoT and DoH were invented to address privacy concerns associated with cleartext ...
Bright Ideas Blog
Detecting GnuTLS CVE-2020-13777 using Zeek

Detecting GnuTLS CVE-2020-13777 using Zeek

| | Apache, Corelight Labs, CVE-2020-13777, GnuTLS, mitm, Network Security, network security monitoring, network traffic analysis, network visibility, Open Source Community, openssl, pcap, Public Key Cryptography, TLS, TLS 1.2, TLS 1.3, Zeek
By Johanna Amann, Software Engineer, Corelight CVE-2020-13777 is a high severity issue in GnuTLS. In a nutshell, GnuTLS versions between 3.6.4 (released 2018-09-24) and 3.6.14 (2020-06-03) have a serious bug in their ...
Bright Ideas Blog
cloud

A Seismic Shift for Decrypted Visibility in the Cloud

| | Cloud Security, Encyrption, Symmetric Key Intercept, TLS 1.3, TLS encryption, TLS handshake
There is a seismic shift happening in the cloud. Two great, tectonic forces of change are colliding and creating unprecedented disruption for security, DevOps and cloud professionals. Ultimately, this shift has prompted ...
Security Boulevard
TLS 1.3: Everything you need to know

TLS 1.3: Everything you need to know

| | Everything Encryption, TLS 1.3
TLS 1.3 was officially published as RFC 8446 last Summer. Here's everything you need to know about the newest version of the protocol. The post TLS 1.3: Everything you need to know ...
Hashed Out by The SSL Store™

TLS 1.3 is nearly here

| | Internet, online, Priority Post, security bloggers network, Security world, technology, TLS, TLS 1.3, transport layer security
TLS 1.3 is nearly upon us, and with it comes a more secure way to do business online. We look at some of the changes coming into force soon. Categories: Security world ...
Malwarebytes Labs
U.S. API security

You Can Now Help Identify Middleboxes Holding Back TLS 1.3 Adoption

| | adoption, connection failure, connection test, error rate, firewall, load-balancer, middlebox, SSL Proxy, TLS 1.3, traffic inspection, traffic interception, traffic monitoring
TLS 1.3 promises great improvements for the encrypted Web, both in terms of security and performance. However, its adoption has been held back for the past year by SSL/TLS proxies and other ...
Security Boulevard