Tag: TLS

  • Hacker News: Disabling cert checks: we have not learned much

    Source URL: https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/ Source: Hacker News Title: Disabling cert checks: we have not learned much Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the critical significance of certificate verification in SSL/TLS communication, particularly highlighting the history and evolution of the curl and libcurl libraries in handling SSL verification. It emphasizes the…

  • Hacker News: How (not) to sign a JSON object (2019)

    Source URL: https://www.latacora.com/blog/2019/07/24/how-not-to/ Source: Hacker News Title: How (not) to sign a JSON object (2019) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed examination of authentication methods, focusing on signing JSON objects and the complexities of canonicalization. It discusses both symmetric and asymmetric cryptographic methods, particularly emphasizing the strengths…

  • The Cloudflare Blog: Resolving a Mutual TLS session resumption vulnerability

    Source URL: https://blog.cloudflare.com/resolving-a-mutual-tls-session-resumption-vulnerability/ Source: The Cloudflare Blog Title: Resolving a Mutual TLS session resumption vulnerability Feedly Summary: Cloudflare patched a Mutual TLS (mTLS) vulnerability (CVE-2025-23419) reported via its Bug Bounty Program. The flaw in session resumption allowed client certificates to authenticate across different AI Summary and Description: Yes Summary: The text discusses a recently discovered…

  • The Register: What does it mean to build in security from the ground up?

    Source URL: https://www.theregister.com/2025/02/02/security_design_choices/ Source: The Register Title: What does it mean to build in security from the ground up? Feedly Summary: As if secure design is the only bullet point in a list of software engineering best practices Systems Approach As my Systems Approach co-author Bruce Davie and I think through what it means to…

  • Hacker News: What’s OAuth2, Anyway?

    Source URL: https://www.romaglushko.com/blog/whats-aouth2/ Source: Hacker News Title: What’s OAuth2, Anyway? Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides an in-depth exploration of the OAuth2 protocol, explaining its design, purpose, and various authorization flows. It delves into the common issues of credential sharing, presents alternatives like Personal Access Tokens (PATs), and discusses…