Tag: Web Security

  • The Register: New SSL/TLS cert to live no longer than 47 days by 2029

    Source URL: https://www.theregister.com/2025/04/14/ssl_tls_certificates/ Source: The Register Title: New SSL/TLS cert to live no longer than 47 days by 2029 Feedly Summary: IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to…

  • Slashdot: Chrome To Patch Decades-Old ‘Browser History Sniffing’ Flaw That Let Sites Peek At Your History

    Source URL: https://yro.slashdot.org/story/25/04/12/2054251/chrome-to-patch-decades-old-browser-history-sniffing-flaw-that-let-sites-peek-at-your-history?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chrome To Patch Decades-Old ‘Browser History Sniffing’ Flaw That Let Sites Peek At Your History Feedly Summary: AI Summary and Description: Yes Summary: The article discusses a significant update in the Chrome browser that aims to mitigate a long-standing privacy attack known as “browser history sniffing.” This side-channel attack…

  • The Register: Chrome to patch decades-old flaw that let sites peek at your history

    Source URL: https://www.theregister.com/2025/04/07/chrome_135_history_sniffing/ Source: The Register Title: Chrome to patch decades-old flaw that let sites peek at your history Feedly Summary: After 23 years, the privacy plumber has finally arrived to clean up this mess A 23-year-old side-channel attack for spying on people’s web browsing histories will get shut down in the forthcoming Chrome 136,…

  • AWS Open Source Blog: AWS Cloud Credits for Open Source Projects: Affirming Our Commitment

    Source URL: https://aws.amazon.com/blogs/opensource/aws-cloud-credits-for-open-source-projects-affirming-our-commitment/ Source: AWS Open Source Blog Title: AWS Cloud Credits for Open Source Projects: Affirming Our Commitment Feedly Summary: Today, Amazon Web Services is proud to reaffirm our commitment to providing vital infrastructure for free and open source software projects. One of the ways we are doing this is with an extended $3…

  • Slashdot: HTTPS Certificate Industry Adopts New Security Requirements

    Source URL: https://it.slashdot.org/story/25/03/31/0529220/https-certificate-industry-adopts-new-security-requirements?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: HTTPS Certificate Industry Adopts New Security Requirements Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recent advancements and requirements from the CA/Browser Forum concerning TLS certificate issuance, highlighting the necessity for improved security practices such as Multi-Perspective Issuance Corroboration (MPIC) and linting. These changes aim to…