R&D Techlead and Dev Manager / e-Commerce / Java- & JEE specialist / gadgeteer / consumer-, privacy- & security activist
With the release of Java SE 7 the Server Name Indication (SNI) extension was introduced as a default in the JSSE client. This enables TLS clients to connect to virtual servers (SNI is explained in RFC 4366 and I am not going...
Let’s Encrypt is great as it is free, but it also has downsides: (1)certificates need to be renewed every 90 days and (2) your internal servers need to be accessible. I was reluctant to use Let’s Encrypt for my internal...
The one downside with Let’s Encrypt has always been the limitation that for verification any internal server needed to open up ports. Using Cloudflare and acme.sh gives my old Synology DS1010+ new life with a proper SSL certificate (the acme.sh supports...
During the installation of my new Ubiquiti UniFi home-network I noticed that the Cloud Key management console uses a self-signed certificate which annoyed me for days: There is no support for Let’s Encrypt nor does Ubiquiti have a knowledge base article explaining...
With the recent security issues across many South African mobile iOS applications, I thought it would be an important exercise to establish how well South African financial institutions have implemented transport layer security across their online financial services. Anyone can run...
Update: A second vulnerability was found – read the follow-up post here: Several South African iOS apps vulnerable A security report was released which higlights that more than 1500 iOS apps are affected by a SSL MiTM attack in AFNetworking 2.5.1. It turned...
It certainly makes you wonder (and worry) that within one week at least 3 members at the PS3ZA forum faced credit-card fraud (here, here and here). Allegedly all users have been using ShopTo.net and I am aware of users who...
Recent Comments