TLS 1.3 Archives - Securezoo

NSA: New guidance to eliminate obsolete TLS protocols

Authentication, Configuration Management, Cryptography, Cybersecurity Articles, Vulnerabilities & Exploits / By Frank Crast / January 9, 2021 / CNSA, DES, DHE, ECDH, ECDH/ECDHE, encryption, IDEA, NIST SP 800-52, NSA, NULL, RC2, RC4, SSL, TDES/3DES, TLS, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3

The National Security Agency (NSA) has issued new guidance to eliminate obsolete Transport Layer Security (TLS) protocol configurations (such as TLS 1.0, TLS 1.1, SSLv2, SSLv3 and weak ciphers).

GnuTLS patches TLS vulnerability that could cause MITM attack

Cryptography / By Frank Crast / June 11, 2020 / CVE-2020-13777, Debian, DTLS, Fedora, Gentoo, GitLab, GnuTLS, OpenSUSE, SSL, TLS, TLS 1.3, Ubuntu

The GNU Transport Layer Security Library (GnuTLS) patched a vulnerability hidden in code for nearly two years. The issue applies to a flaw in how TLS 1.3 session resumption works without a master key. As a result, an attacker could exploit and launch man-in-the-middle (MITM) attacks.

OpenSSL patches High risk vulnerability (CVE-2020-1967)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / April 24, 2020 / CVE-2020-1967, DOS, OpenSSL, SSL_check_chain, TLS 1.3

OpenSSL patched a high severity vulnerability CVE-2020-1967 in certain OpenSSL versions. As a result, a bad actor could exploit and launch a Denial of Service attack against impacted systems.

Google public DNS service now supports DNS-over-TLS

Cryptography, Data Privacy, Messaging Security, Network Security / By Frank Crast / January 10, 2019 / DNS, DNS-over-TLS, Google, RFC 7766, TLS, TLS 1.3

Google announced a major security enhancement to its public Domain Name Service (DNS), the most widely used public DNS recursive resolver service used on the internet.

TLS 1.3 protocol is officially standard

Application Security, Cryptography, Data Privacy, Standards & Guidelines / By Frank Crast / August 14, 2018 / encryption, IETF, RFC 8446, SSL, TLS, TLS 1.3

The Transport Layer Security (TLS) 1.3 has officially become a standard last week. The new TLS standard now offers improved privacy, security and performance to the internet security protocol.