674 reputation
34
bio website netsekure.org
location
age
visits member for 5 years, 1 month
seen Apr 22 '13 at 22:43

Jan
26
comment Free (or nearly free) Trusted SSL Certificate?
I've been using StartCom for 3 years now and they rock. Can't go wrong with them and their certs being free for an year. Also, the owner of the company still runs most of it and detected recent attacks himself!
Jun
28
comment SSL Certificate with any webhost
I believe in stating the facts, since you never know what his target segment of users is. It might very well be all mobile users or desktop users using Firefox.
Jun
28
comment SSL Certificate with any webhost
Depends on the hosting company. If they support TLS Server Name Indication on their server, he can use the certificate without dedicated IP address. Most browsers work fine with that, except IEx running on WinXP.
Jun
24
comment SVN SSL negotiation failed
Alternatively, get a network capture to see which phase of the handshake is failing.
Sep
3
comment What is TLS and how does it compare to SSL?
Also, TLS does not break compatability with SSL, please verify your sources.
Sep
3
comment What is TLS and how does it compare to SSL?
I beg to differ. TLS does not generally refer to STARTTLS command in SMTP. Any documentation that you read will refer to TLS as the TLS protocol, which is used by SMTP to protect its traffic. Now when it comes to "Opportunistic TLS", then you can involve higher level protocols which have the "opportunity" to use TLS or not.
Sep
3
comment What is TLS and how does it compare to SSL?
All of those comments apply to SSL/TLS being used by other protocols. SSLv3 and TLSv1.0 are almost identical with differences only known to the protocol experts.
Aug
24
comment Using SSLv3 - Enabling Strong Ciphers Server 2008
What is the machine you are trying to authenticate to? If it is publicly reachable, I can take a peek at what it supports and see if there is anything I can spot.
Aug
24
comment Using SSLv3 - Enabling Strong Ciphers Server 2008
The error most likely doesn't come from MSXML.DLL, rather from the security subsystem on Windows. Look in the event log for logs from the "Schannel" component, which implements SSL/TLS on Windows. There might be some clues there. Did you actually resolve the issue?
Aug
24
comment Issues disabling SSL 2.0 in IIS 6
SSLv2 upgrade support means a client using backwards compatible messages can negotiate SSLv3 and above just fine. This is not a problem and can actually allow interoperability with older clients (even though they don't do SSLv2). If you need more info on that, let me know and I can explain more.
Aug
23
comment Issues disabling SSL 2.0 in IIS 6
The KB does say that you need to add DWORD named Enabled and set it to 0. The DisabledByDefault will have no effect once Enabled is set to 0, it only governs whether the protocol is present by default when the protocol is enabled.
Aug
23
comment Issues disabling SSL 2.0 in IIS 6
Can you share what reg keys GSEC modified and what you expected to be modified?
Aug
23
comment SendMail TLS Certificate - Can it be shared for different hosts?
Web server with different host name will give error if it doesn't match the cert, so without load balancer or similar device in front of multiple servers with different host names, I don't see how it will work. You could use round robin DNS, but then all servers will appear with the same hostname, so no issue there.
Aug
20
comment SendMail TLS Certificate - Can it be shared for different hosts?
Without a load balancer in front of the servers, he will be getting a name mismatch between the certificate name and the different host names, so that won't work.
Jul
23
comment Untrusted certificate warning on replacement SSL certificate
The reason it works is that most likely you have Subject Alternate Name extension on the certificate that lists both myserver.com and www.myserver.com. A lot of CAs do this when issuing certificates.
May
18
comment Partial Client Certificate request for Apache HTTP
Depending on the setup, depth of 1 might actually break otherwise working scenario. Some CAs issue certificates with chain length greater than 1.
May
14
comment Does HTTPS use TCP or UDP?
Most SSL implementations expose it as SSL socket, so it implies TCP. There are very rare occurrences of using any other transport.
Apr
26
comment Multiple domains with SSL on same IP
With IE, support doesn't come from the IE version, rather comes from the underlying OS version. Vista and above support SNI. XP doesn't, so even with IE8 on XP, you won't get SNI.
Mar
31
comment Windows 7, IIS 7.5, Selfssl
I forgot to add that you can get a certificate (probably not the free one) that has multiple names for the same site, which will allow you to access it over https using different names. You can add peanut and peanut.com to the SAN field (subject-alternate-names) and it will work just fine : ).
Mar
31
comment Windows 7, IIS 7.5, Selfssl
Yes, getting another cert will work fine, as long as the Subject or Subject-Alternate-Names field contains the name you use to reach the webapp. You can change certificates at your convenience.