gellerb
Re:Security alerts on GitHub
on Thursday November 16, 2017 @05:42PM (#15717375)
One can use sourceclear.com for Composer.
Re:Security alerts on GitHub
on Thursday November 16, 2017 @05:40PM (#15717359)
One can use sourceclear.com for Python support.
Re:Subresource Integrity
on Friday September 18, 2015 @05:19PM (#10242119)
Login and inspect the home page afterwards.
http://imgur.com/bwUHgcT
Re:Subresource Integrity
on Friday September 18, 2015 @04:57PM (#10242014)
SRI allows one to specify multiple hashes. In other words, to prevent this particular mismatch, one could include the hash of the new resource as well as the previous valid hash.
Re:OpenSSL Security Advisory
on Thursday June 11, 2015 @03:18PM (#9701711)
Use Chrome Canary
Vault – A tool for managing secrets
Re:Soylent 1.5 Has Arrived
on Monday June 01, 2015 @04:49PM (#9642051)
It unfortunately includes carrageenan.
MongoDB and ReDoS
WebRTC Requires Perfect Forward Secrecy (PFS) Starting in Firefox 38
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @05:02PM (#7649013)
ssl:endpoint add-on
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @03:33PM (#7648582)
The HTTP 2.0 spec[1] mentions "Implementations of HTTP/2 MUST support TLS 1.2 and it appears Chrome will implement HTTP/2 via TLS only (http://volgarev.me/blog/75094931827).
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @02:57PM (#7648409)
Elastic Loading Balancing for AWS customers & Heroku allow for perfect forward secrecy and Akamai customers can expect ECDHE in Q3 of this year.
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @12:57PM (#7647629)
ds9, yes, "site certs the browser doesn't trust a CA for" is more accurate. You can find the exact details of HSTS and self-signed certs in the draft in section 11.3[1]. I've updated the post to hopefully be more clear.
[1] http://tools.ietf.org/html/draft-ietf-websec-strict-transpor...
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @12:07PM (#7647323)
In Safari one can delete ~/Library/Cookies/HSTS.plist
Re:Is Your Site HSTS Enabled?
on Friday April 25, 2014 @12:03PM (#7647294)
Yeah. I noticed that paypal.com has a max-age of 4 hours.