🦞🌯 Lobster Roll

Thread

BREACH: SSL, Gone in 30 Seconds (breachattack.com)

Stories related to "BREACH: SSL, Gone in 30 Seconds" across the full archive.

BREACH: SSL, Gone in 30 Seconds (breachattack.com)
Dropbox Has Hired Outside Experts To Investigate Possible Security Breach (techcrunch.com)
Enhancing digital certificate security (fake *.google.com SSL cert issued) (googleonlinesecurity.blogspot.de)
Web Security Relies on SSL Which Relies on Email Which is Broken (blog.whitehatsec.com)
MongoHQ Security Breach (security.mongohq.com)
Experts Say Healthcare.gov a "Breach Waiting to Happen" (additiveanalytics.com)
Beyond SSL client cert authentication: authorization (spootnik.org)
Schneier on Security: Was the iOS SSL Flaw Deliberate? (schneier.com)
Critical crypto bug in OpenSSL opens two-thirds of the Web to eavesdropping (arstechnica.com)
Brief security review of Akamai's secure malloc patch to OpenSSL (lekkertech.net)
Preventing a “BREACH” Attack (facebook.com)
OpenSSL to get a security audit and two full-time developers (arstechnica.com)
OpenSSL Security Advisory [05 Jun 2014] (openssl.org)
Along with a pretty website for CVE-2014-0224 (CCS Injection Vulnerability): http://ccsinjection.lepidum.co.jp/ and a write-up about it by Adam Langley: https://www.imperialviolet.org/2014/06/05/earlyccs.html
LibreSSL portable and claims of insecurity (tedunangst.com)
Keyless SSL: The Nitty Gritty Technical Details (blog.cloudflare.com)
TinyCert: Generate SSL Certificates And Become Your Own Certificate Authority (longren.io)
Nasty SSL 3.0 vulnerability to be revealed soon (theregister.co.uk)
Wordpress.com's move to SSL complete (developer.twingly.com)
The Sony breach and what it means for security policy (dirk.to)
OpenSSL Security Advisory [19 Mar 2015] (openssl.org)
OpenSSL Security Advisory -- upgrade now (mta.openssl.org)
OpenSSL Security Advisories - LibreSSL Largely Unaffected (undeadly.org)
OpenSSL Security Advisory [9 Jul 2015] (openssl.org)
Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) (openwall.com)
OpenSSL Security Advisory [1st March 2016] (openssl.org)
How to set up Free SSL for your Website (jeremymorgan.com)
How to get truly free SSL for your website with letsencrypt
OpenSSL Security Advisory [3rd May 2016] (openssl.org)
How to Install Free SSL for Your Website (dzone.com)
Why is nobody using SSL client certificates? (2008) (pilif.github.io)
Achieving a Perfect SSL Labs Score with Go (blog.bracelab.com)