Tag: ssl
-
Key Extraction by uprobe Attachment on OpenSSL for SSL Inspection
Man-in-the-middle attacks are elegantly mitigated in TLS, with TLS1.3 introducing more robust encryption protocols and a streamlined handshake process that significantly reduces the vulnerability to these types of attacks. By employing stricter encryption standards and eliminating outdated cipher suites, TLS 1.3 enhances security measures to effectively counter potential interception and unauthorised data decryption. This upgrade…
-
Docker Containers: Enabling SSL for Secure Databases
Why Enable SSL for Databases? Security is critical for any application, especially when dealing with sensitive data like financial records or user information. Databases such as MongoDB and PostgreSQL communicate over the network, making them vulnerable to interception. SSL (Secure Sockets Layer) encrypts the communication between the client and the database server to prevent data…
-
Understanding HTTP and HTTPS for Secure Web Communication
Every time a user visits a website, data is transmitted between the web browser and the server through a structured communication protocol. HTTP (Hypertext Transfer Protocol) is the foundation of this exchange, enabling the transfer of web pages, images, and other resources. However, as cybersecurity threats have evolved, the need for a more secure communication…