Tag Archives: https

StartCom 決定關門

在 Hacker News 上看到 StartCom 決定關門的消息:「Termination of the certificates business of Startcom」。 2018 停發新的憑證,然後維護兩年 CRL 與 OCSP 服務: We´ll set January 1st 2018 as the termination date and will stop issuing certificates therefrom. We will maintain our CRL and OCSP … Continue reading

Posted in Computer, Murmuring, Network, Privacy, Security, Service|Tagged , , , , , , , , , , |Leave a comment

Savitech (盛微) 的 USB 音效驅動程式會安裝 Root CA (被發了 CVE-2017-9758)

在 Hacker News 上看到 CERT 的「Savitech USB audio drivers install a new root CA certificate」提到 Savitech USB audio driver 會安裝自己的 Root CA: Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver … Continue reading

Posted in Computer, Murmuring, OS, Privacy, Programming, Security, Software, Windows|Tagged , , , , , , , , , , , , , , , |Leave a comment

CloudFlare 也要提供 Certificate Transparency 的 Log 伺服器了...

看到 CloudFlare 請求加入 Chromium (Google Chrome) 的伺服器列表:「Certificate Transparency - Cloudflare "nimbus2017" Log Server Inclusion Request」。 對照之前的「Chromium 內提案移除 HPKP (HTTP Public Key Pinning)」以及「Let's Encrypt 的 Embed SCT 支援」,這樣看起來是瀏覽器內會有一份白名單,只有在這白名單上的 Embed SCT 才會被信任... 但弄到這樣的話,log server 是不是也要有稽核機制? 好像哪邊搞錯了方向啊...

Posted in Computer, Murmuring, Network, Privacy, Security, Service, WWW|Tagged , , , , , , , , , , , , , , |Leave a comment

HAProxy 1.8 多了好多東西...

雖然大家都在用 nginx,但 HAProxy 還是在努力:「What’s New in HAProxy 1.8」。 這個版本多了好多東西... 支援 HTTP/2。(終於...) Multithreading 架構。(health check 總算是一隻了 XD 不會開八隻就打八次...) DNS 的 Service Discovery。 TLS 1.3 0-RTT。(居然支援了...) 有種突然醒過來的感覺...

Posted in Computer, Murmuring, Network, Privacy, Security, Service, Software, WWW|Tagged , , , , , , , , , , , , |Leave a comment

Let's Encrypt 的 Embed SCT 支援

翻到 Let's Encrypt 的 Upcoming Features 時看到: Embed SCT receipts in certificates ETA: February, 2018 對 Embed SCT 不熟,所以查了查這個功能。 這指的是在簽發 SSL certficiate 後,把資料丟給 Certificate Transparency (CT) 伺服器後,伺服器會提供 signed certificate timestamp (SCT);而這個資料放到 SSL certificate 內叫做 Embed SCT:(出自 CT 的 FAQ) What … Continue reading

Posted in Browser, Computer, DNS, GoogleChrome, Murmuring, Network, Privacy, Security, Service, Software, WWW|Tagged , , , , , , , , , , , , , , , , , , , |Leave a comment

Chromium 內提案移除 HPKP (HTTP Public Key Pinning)

Twitter 上看到這則 tweet,提到要移除 HPKP (HTTP Public Key Pinning): Intent To Deprecate And Remove: Public Key Pinning (in Chromium) https://t.co/agS3fll7eR — Adam Langley (@agl__) October 27, 2017 blink-dev 上的討論可以參考「Intent To Deprecate And Remove: Public Key Pinning」(就是上面那個連結,只是拉出來)。 這個提案大概可以推敲出理由... 目前的作法必須寫進瀏覽器內,這樣明顯會有 scale 問題,而且這個作法本身就很 workaround,只能保護所謂「高價值」的 … Continue reading

Posted in Browser, Computer, DNS, GoogleChrome, Network, Security, Software, WWW|Tagged , , , , , , , , , , , , , , , , , , , |2 Comments

Android 將測試 DNS over TLS

從「Android getting "DNS over TLS" to prevent ISPs from knowing what websites you visit」這邊看到的報導,原 文在「Android getting “DNS over TLS” support to stop ISPs from knowing what websites you visit」這邊可以看到。 It appears that “DNS over TLS” support is being added to … Continue reading

Posted in Cloud, Computer, DNS, Murmuring, Network, OS, Privacy, Security, Service, Software|Tagged , , , , , , , , |1 Comment

DHS 要求郵件系統都必須使用 STARTTLS、DMARC,並且全面禁用 RC4 與 3DES

在 Twitter 上看到 18F 貼了 DHS 的新規定:「Enhance Email and Web Security」。 Just launched by our friends at DHS! A new federal directive to require DMARC and STARTTLS, and to cut RC4 and 3DES: https://t.co/gp5G7A6LMA pic.twitter.com/6V4UJ9sGIo — 18F (@18F) October 16, … Continue reading

Posted in Computer, Mail, Murmuring, Network, Privacy, Security, Service, WWW|Tagged , , , , , , , , , , , , , , , , , , , , |Leave a comment

ALB 支援 SNI

AWS 宣佈 ALB 支援 SNI 了:「Application Load Balancers Now Support Multiple TLS Certificates With Smart Selection Using SNI」。 不過這篇比較有趣的是,他範例用的是 VimIsBetterThanEmacs.com 與 VimIsTheBest.com 這兩個網域名稱 XDDD: I’ll use a few example websites like VimIsBetterThanEmacs.com and VimIsTheBest.com. I’ve purchased and hosted these domains … Continue reading

Posted in AWS, Cloud, Computer, DNS, Editor, Murmuring, Network, Privacy, Security, Software, Vim|Tagged , , , , , , , , , , , , , , |Leave a comment

Google 打算更廣泛的預設使用 HSTS

Google 宣佈了更廣泛開啟 HSTS 的計畫:「Broadening HSTS to secure more of the Web」。 然後先提到 .foo 與 .dev 的「Google Chrome 將 .dev 設為 HSTS Preload 名單」這件事情: In 2015 we created the first secure TLD when we added .google to the HSTS preload list, … Continue reading

Posted in Browser, Computer, DNS, GoogleChrome, Murmuring, Network, Privacy, Security, Software, WWW|Tagged , , , , , , , , , , , |Leave a comment