Security News

Let's Encrypt Begins Retirement of TLS-SNI-01 Validation
2019-01-22 16:03

Free and open Certificate Authority (CA) Let’s Encrypt today started the process of completely retiring TLS-SNI-01 validation support.  read more

Get in the bin: Let's Encrypt gives admins until February 13 to switch off TLS-SNI
2019-01-22 10:31

End-of-life followed 2018 fake Website certificate drama If you're still using TLS-SNI, stop: a year after a slip-up allowed miscreants to claim Let's Encrypt certificates for domains they didn't...

TLS Certificates for Many .gov Domains Not Renewed Due to Government Shutdown
2019-01-10 17:02

Many TLS certificates for .gov domains have not been renewed due to the ongoing shutdown of the United States government, making them insecure or inaccessible. read more

Google Secures Public DNS Queries With DNS-over-TLS
2019-01-10 15:33

Google this week announced that users can now secure queries between their devices and the Google Public DNS with DNS-over-TLS, which improves their privacy and integrity.  read more

Google DNS Service (8.8.8.8) Now Supports DNS-over-TLS Security
2019-01-10 08:48

Almost every activity on the Internet starts with a DNS query, a key function of the Internet that works as an Internet's directory where your device looks up for the server IP addresses after you...

Great, you've moved your website or app to HTTPS. How do you test it? Here's a tool to make local TLS certs painless
2019-01-09 08:04

Breathe easier knowing you've tested your software properly A Google cyrptoboffin is close to releasing a tool that will hopefully make all of us more secure online.…

Bleichenbacher’s CAT puts another scratch in TLS
2018-12-04 13:26

Researchers demonstrate Cache-like ATacks against RSA key exchange.

CAT of seven TLS: BEAST-style attack breaks web crypto
2018-12-01 01:00

Luckily for all, it's a local threat Crypto boffins have found a way to exploit side channel information to downgrade most of the current TLS implementations, thanks to ongoing support for...

DigiCert works with its partners to move past Google’s distrust of Symantec TLS certificates
2018-11-08 02:30

DigiCert has executed a transfer of online trust, marked by the stable release of Chrome 70 that signals the end of Google’s Symantec root distrust plan. In the year since acquiring Symantec’s...

How to enable SSL and TLS 1.3 on NGINX
2018-11-07 19:14

Jack Wallen walks you through the steps for enabling SSL and TLS 1.3 on your NGINX websites.