Security News

Bleichenbacher’s CAT puts another scratch in TLS
2018-12-04 13:26

Researchers demonstrate Cache-like ATacks against RSA key exchange.

CAT of seven TLS: BEAST-style attack breaks web crypto
2018-12-01 01:00

Luckily for all, it's a local threat Crypto boffins have found a way to exploit side channel information to downgrade most of the current TLS implementations, thanks to ongoing support for...

DigiCert works with its partners to move past Google’s distrust of Symantec TLS certificates
2018-11-08 02:30

DigiCert has executed a transfer of online trust, marked by the stable release of Chrome 70 that signals the end of Google’s Symantec root distrust plan. In the year since acquiring Symantec’s...

How to enable SSL and TLS 1.3 on NGINX
2018-11-07 19:14

Jack Wallen walks you through the steps for enabling SSL and TLS 1.3 on your NGINX websites.

Could TLS session resumption be another ‘super cookie’?
2018-10-25 09:51

Researchers think they’ve spotted a tracking technique that nobody has been paying attention to - TLS session resumption.

You like HTTPS. We like HTTPS. Except when a quirk of TLS can smash someone's web privacy
2018-10-19 07:04

Never-closed browsers and persistent session tickets make tracking a doddle Analysis Transport Layer Security underpins much of the modern internet. It is the foundation of secure connections to...

Browser vendors unite to end support for 20-year-old TLS 1.0
2018-10-16 22:00

Almost everyone has now migrated to TLS 1.2, and a few have moved to TLS 1.3.

Major Browsers to Kill TLS 1.0, 1.1
2018-10-16 12:16

All major web browsers will deprecate support for the older Transport Layer Security (TLS) 1.0 and 1.1 traffic encryption protocols in the first half of 2020. Apple, Google, Microsoft and Mozilla...

Web browsers sharpen knives for TLS 1.0, 1.1, tell protocols to dig their own graves for 2019
2018-10-16 07:03

IE, Edge, Safari, Firefox, Chrome, all planning to deprecate lousy old versions by 2020 Sysadmins and netizens, it's time to get serious about killing off old, buggy and insecure versions of...

Chrome, Firefox, Edge and Safari Plans to Disable TLS 1.0 and 1.1 in 2020
2018-10-15 18:18

All major web browsers, including Google Chrome, Apple Safari, Microsoft Edge, Internet Explorer, and Mozilla Firefox, altogether today announced to soon remove support for TLS 1.0 (20-year-old)...