-
Chat in Forschung und Lehre? Sicher!
-
Interactive web sites for efficient cooperation based on open standards
We published a position paper in German.
-
SIEGE: Service-Independent Enterprise-GradE protection against password scans
-
Securing fetchmail with improved TLS parameters
fetchmail is the workhorse for downloading mail from legacy addresses. This does not mean that you want to be limited to legacy security for your passwords or mail contents. TLS Interposer helps upgrade security.
-
Upgrading Apache 2.2 OpenSSL security with TLS Interposer
Undoubtedly, you will have heard about the weaknesses of old SSL and TLS protocol versions and ciphers. Web browsers have been updated; but the server administrators are left alone: For stability reasons, many run long-term support editions such as Ubuntu 12.04 LTS. Even without that, most will stick to the reliability of Apache 2.2, hesitant…
-
Eliminate BEAST, CRIME, Lucky13, RC4, SSLv3 weaknesses from binary/legacy applications
Security is hard. Security that works with a variety of platforms under a flurry of circumstances with an endless choice of applications is practically impossible. SSL and TLS, the Internet security workhorses, try to achieve this feat … and fail from time to time. While some software has been updated, not all of it has.…
-
How to create DNSsec DANE TLSA entries
Rationale One of the most promising features for DNSsec is the ability to tell a client which certificate to expect when connecting via Transport Layer Security (TLS). RFC 6698 specifies how TLS Authentication information can be put into DNSsec. So when you ask for the IP address of the server, you can simultaneously obtain the information which…
-
Utilizing Cloud Storages for iSCSI: Is Security really expensive?
-
Versatile Key Management for Secure Cloud Storage
-
BitTorrent traffic obfuscation: A chase towards semantic traffic identification
