How to inspect TLS encrypted traffic
Guest Post: Three methods to decrypt TLS traffic, how each works, and when to use them.
Tag: TLS
SMTP downgrade attacks and MTA-STS
Guest Post: Auditing prominent mail providers to discover how they handle email encryption and show how MTA-STS can help improve email security.
[Podcast] Calling time on DNSSEC: Part 1 of 2
Geoff Huston discusses the market failure of DNSSEC in deployment.
Three of the best: Security
Here are APNIC Blog’s top three posts related to Security for 2023.
Security control changes due to TLS Encrypted Client Hello
Guest Post: How will the forthcoming TLS Encrypted Client Hello changes affect your current set of defences?
HSTS preload adoption and challenges
Guest Post: HSTS preload is a mitigation against a specific attack. How widely is it used?
Delegated domain verification
Guest Post: When it comes to managing TLS certificates, one often-overlooked aspect is delegated domain verification.
RIPE 86 bites — QUIC and active network management
What is challenging active network management?
Notes from IETF 116
NTP security, transition mechanisms, TCP delayed ACKs, alternate name systems, and more from IETF 116.
Not that simple: Email delivery in the 21st century
Guest Post: How do real-world deployments keep up with increasing complexity of email delivery and security.