Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

learn more… | top users | synonyms

17
votes
4answers
38k views

Does HTTPS use TCP or UDP?

Does HTTPS use TCP or UDP?
6
votes
5answers
431 views

Is the world ready for name based HTTPS vhost service? [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I'm developing a web app that MUST MUST MUST use HTTPS. It's kinda developed on the cheap though, and I really ...
15
votes
5answers
8k views

Do any well-known CAs issue Elliptic Curve certificates?

Background I've seen that Comodo has an elliptic curve root ("COMODO ECC Certification Authority"), but I don't see mention of EC certificates on their web site. Does Certicom have intellectual ...
1
vote
1answer
164 views

Can I get a CA-signed SSL cert for a host accessed by IP address?

I have a server which is accessed by IP address over a LAN. The IP address is sometimes changed, and it is never accessed with a DNS hostname. Is it possible to get a CA-signed certificate which ...
6
votes
3answers
11k views

Require TLS on RDP for all connections

I have a 2008 DC and a 2008 AD CS server and a Windows 7 client. What I would like is to require the certificate to be used when RDPing to the server. The certificate is valid, and if I connect ...
0
votes
1answer
75 views

FileZilla not sending 220

I just installed FileZilla Server to replace our old Ipswitch FTP software. I configured it to use the same SSL cert, listen on port 990 and only accept SSL, bind to the external IP, etc. Pretty much ...
1
vote
2answers
127 views

VPN Security Versus Plain Old TLS

We want to expose a web-app over the Internet. The obvious solution is to make it available over HTTP with TLS and RBAC. Would locking access down even further through the use of a VPN enhance ...
2
votes
2answers
7k views

pure-ftpd gives wrong ip for passive connection in TLS mode

I am setting up our ftp server ( pure-ftpd-1.0.21-r1 ) to use TLS/SSL. It works when I don't use TLS. Started with command options: -S 21 -c 30 -C 10 -B -k 90% -A -R -Z -p 49152:65534 -U 013 -s ...
1
vote
2answers
240 views

Modifying SSL / TLS certificates for local use

I am currently developing some applications on my local 'serverfarm'. I have set up ZendServer with Apache2 and PHP, which works very fine, and nothing unwanted happened until now: Now I wanted to ...
1
vote
1answer
3k views

How does pptpd (poptop) or pppd work with eap-tls and mppe-128?

To create a VPN I've installed pptpd on an Ubuntu domU (Debian domUs can also be created). MSCHAPv2 isn't a very strong authentication protocol so I'd like to use EAP-TLS. I've set up a FreeRADIUS ...
27
votes
5answers
8k views

Functional implications of differences in SSL and TLS

I know that TLS is essentially a newer version of SSL, and that it generally supports transitioning a connection from unsecured to secured (commonly through a STARTTLS command). What I don't ...
4
votes
5answers
5k views

LDAP over SSL/TLS working for everything but login on Ubuntu

I have gotten OpenLDAP with SSL working on a test box with a signed certificate. I can use an LDAP tool on a Windows box to view the LDAP over SSL (port 636). But when I run dpkg-reconfigure ...
4
votes
3answers
425 views

Should web farms be concerned with TLS handshake overhead

I have a web farm where the web servers are responsible for negotiating the secure connections. Does anyone else with a web farm go out of their way to reduce TLS handshake overhead by ensuring that ...
3
votes
3answers
8k views

How do I limit SSL/TLS connections to at least 128-bit encryption?

When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...