-
Obtaining TLS certificate information on the command line
Here are a few helpful commands if you want to inspect and dump certificates for analysis or debugging:
-
Counting like a computer
Computers are very good at counting. But usually only within narrow limits. Here is an insight into where these limits come from and what goes wrong when they are exceeded.
-
SMTP Smuggling Status
«SMTP Smuggling» is a vulnerability that allows to circumvent some mail checks at the receiver and therefore will allow additional spam and/or phishing messages through. Here is the list of what we currently know.
-
Post Quantum and Homomorphic Encryption made easy
Major challenges in computer and information security are the advent of quantum computers and the need to trust your data to (cloud) service providers. New cryptography is supposed to help, but they look daunting. At their core, however, they are just children’s riddles. An introduction to Lattice cryptography and Learning With Errors.
-
«The Cloud» does not exist
What is cloud anyway? And why are not all clouds the same? An overview to create clarity. The topic of the cloud is currently on everyone’s lips again, and decisions are pending in many places. Clarity is essential for assessing the impact on individuals, the economy and society. That’s why we’re starting a small series…
-
Offline digital cash?
The question of using digital money in the event of a network outage comes up again and again. Here is an overview of the options and their pros and cons.
-
Git, PGP, and the Blockchain: A Comparison
The Blockchain, a cryptographically linked list with additional restrictions, is often touted to be the most significant innovation towards democratization of the digital landscape, especially the Internet. However, the ideas did not come out of thin air, but have ancestors and relatives. An attempt at technological genealogy.
-
Debugging NTS problems
Debugging is hard, debugging security protocols doubly so. And there are not many tools and how-to’s available for NTS yet. So, here’s a (short) list of NTS problems I have seen and some tricks for debugging them.
-
NTS and dynamic IP addresses
Good news is that NTS relies on DNS names, no longer “naked” IP addresses. But what happens when the DNS name changes, pointing to a different IP address? A look at the protocol, the Chrony source, and the implications.
-
Transparent, Trustworthy Time with NTP and NTS
«Time is Money», as the old adage says. Who controls the time, controls all kinds of operations and businesses around the world. And therefore, controls the world. Today, we all take accurate time for granted. Even though, today, it is delivered over the Internet mostly unsecured. But this is easy to change.