Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

275
active users

veganism.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.0-alpha.5

#ssl

4 posts4 participants1 post today
Public
LaF0rge

In case you haven't seen it yet, check out the analysis of the devastating state of [mostly] modern #OpenSSL by members of haproxy at haproxy.com/blog/state-of-ssl- - hard to imagine such massive performance regressions getting into mainline linux distributions unnoticed by the distributors. #linux #ssl

HAProxy TechnologiesThe State of SSL StacksThe SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.
Public
GripNews

🌘 SSL 堆疊現狀
➤ OpenSSL 3.0 帶來的挑戰與解決方案
✤ haproxy.com/blog/state-of-ssl-
本文探討了 SSL (Secure Sockets Layer) 技術的最新發展及其對網路效能和安全性的影響。隨著 OpenSSL 3.0 版本的推出，雖然增強了安全性與模組化，但也帶來了效能下降和 API 相容性問題。文章分析了 OpenSSL 3.0 的缺點，並評估了替代方案，如 BoringSSL、LibreSSL、WolfSSL 和 AWS-LC，旨在幫助開發者和組織做出更明智的 SSL 策略選擇，以確保網路應用程式的效能、安全性和可維護性。HAProxy 也在持續適應這些變化，以提供最佳的使用者體驗。
+ 這篇文章點出了 SSL 發展的關鍵問題，對於維護高流量網站的工程師來說非常有幫助，讓他們可以評估升級成本。
+ 瞭解 SSL 效能問題對網路安全至關重要，這篇文章提供了很好的分析和實用資訊。
#資訊安全 #網路效能 #SSL/TLS

HAProxy TechnologiesThe State of SSL StacksThe SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.
Public
Tormod

Tech vocablurary question:

Are you seeing people still referring to "SSL” as the most natural thing, or have we finally moved on to calling TLS simply "TLS”?

TLS was introduced more than 25 years ago as a SSL replacement. SSL v3 was deprecated 10 years ago. Isn't it time we also deprecate the use of the term SSL?

My opinion is that we're looking less professional by continuing to deadname TLS.

Thankful for any input and observations from your part of the IT / networking fields.

#ssl#tls#networking
Public
Joaquim Homrighausen

Does anyone have experience with LetsEncrypt (certbot) and DNSSEC? 🤔

I have an issue with a hostname in a domain (that I do not have admin access to). The domain has a DS record, and certbot complains about invalid CAA this or that.

I found this, but can't really figure out if this points me to the issue at hand:

community.letsencrypt.org/t/no

Let's Encrypt Community Support · No CAA + DNSSEC - nonexistence proof = issuance failureI suspect this is working as intended, but I’d like to verify. We attempted to have a certificate issued for a domain that had no blocking CAA record, had DNSSEC enabled, and the authoritative NS did not provide a non-existence proof for the CAA type (making the lack of CAA record invalid). Is this a necessary security feature, or a potential oversight? It seems to me DV with DNSSEC would necessarily require crypto proofs for the A/AAAA/TXT records which are used to prove ownership, not the C...
#certbot#letsencrypt#dnssec
Public
Probesys :scop:

🔐⏰ La durée de validité des certificats SSL/TLS va être drastiquement réduite dans les années à venir :

- Actuellement, la durée maximale est de 398 jours
- À partir de mars 2026, elle passera à 200 jours
- À partir de mars 2027 : 100 jours
- À partir de mars 2029 : 47 jours

#SSL#TLS#Sysadmin
Public
Quixoticgeek

Does anyone know how this new SSL cert expiry date thing is going to affect things like user authentication with SSL certs, i.e. for openvpn.

If we're running our own CA, can I get safari, chrome et al to accept longer cert expiry?

#Linux#SSL#OpenVPN
Public
Verfassungklage@troet.cafe

Nur noch 47 Tage:

#Gültigkeit von #TLS - #Zertifikaten wird drastisch verkürzt

Ab 2029 dürfen #TLS-Zertifikate statt 398 nur noch höchstens 47 Tage lang gültig sein. Der von #Apple eingereichte Vorschlag hat breite Zustimmung erhalten.

Das #CA / #Browser #Forum hat beschlossen, die maximale Gültigkeitsdauer digitaler Zertifikate für den verschlüsselten Datenaustausch via #SSL / #TLS von aktuell 398 auf deutlich geringere 47 Tage zu reduzieren.

golem.de/news/nur-noch-47-tage

Golem.de · Nur noch 47 Tage: Gültigkeit von TLS-Zertifikaten wird drastisch verkürzt - Golem.deBy Marc Stöckel
VegansExploreLive feeds
About