Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Administered by:

Server stats:

9.5K
active users

mastodon.world: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#publickeyinfrastructure

0 posts0 participants0 posts today
Public
Harry Sintonen

Just spent some quality time figuring out why HTTPS requests with incorrect system time would fail - even though the time was between the certificate NotBefore and NotAfter.

OCSP stapling was the culprit. This adds a more strict "window of system time validity" due to the way the protocol works. The obvious reason for the smallish window is to allow caching, while reducing the replay attack possibilities. Thus, the system clock can't be backdated more than a few hours, regardless of certificate NotBefore. The system time can be more off towards the future.

In our use case, we don't need to worry about revocation and hence we will just kill OCSP use. With this, we will still have the limits set by the certificate NotBefore and NotAfter, but at least they're more predictable and somewhat laxer.

#pki#publickeyinfrastructure#tls
Public
Pyrzout :vm:

Post-Quantum Cryptography: The Implications of Google’s Willow and Other Quantum Computers for Cybersecurity – Source: securityboulevard.com ciso2ciso.com/post-quantum-cry #rssfeedpostgeneratorecho #PostQuantumCryptography #publickeyinfrastructure #SecurityBloggersNetwork #CyberSecurityNews #SecurityBoulevard #quantumcomputing #Cryptography #articles #pki

CISO2CISO.COM & CYBER SECURITY GROUP · Post-Quantum Cryptography: The Implications of Google’s Willow and Other Quantum Computers for Cybersecurity – Source: securityboulevard.comSource: securityboulevard.com - Author: Paul Horn Quantum computing was long considered to be part of a distant future. However, it is quickly becoming
Public
Pyrzout :vm:

Latest OpenPubkey Project Initiative Makes SSH More Secure – Source: securityboulevard.com ciso2ciso.com/latest-openpubke #IdentityandAccessManagement #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #publickeyinfrastructure #ApplicationSecurity #CyberSecurityNews #SecurityBoulevard #Identity&Access #NetworkSecurity #Risk&Compliance #authentication #SocialFacebook #CloudSecurity #Cybersecurity #datasecurity

CISO2CISO.COM & CYBER SECURITY GROUP · Latest OpenPubkey Project Initiative Makes SSH More Secure - Source: securityboulevard.comSource: securityboulevard.com – Author: Michael Vizard The OpenPubkey project this week shared a mechanism for remotely logging into IT environments based on the OpenID Connect (OIDC) protocol that makes authentication using Secure Shell (SSH) certificates more secure. OIDC is a protocol that lets users log into websites or applications using email accounts or some other […]
ExploreLive feeds
About