-
Need help to set cipher suites in Opensearch dashboards. Unable to completely understand the way it works and tried with node.options but no visible success. The objective is to avoid using RC4 based …
-
Some requirement(s) should require the usage of forward secrecy whenever it makes sense.
see https://github.com/OWASP/ASVS/pull/2212#issuecomment-2451664978
Possible impact:
* Key exchange (e…
-
## Basic Info
Recently, the #1581 "Add ciphers to SSL options" was fixed, and one adapter supports it.
A good mapping-out of the rest of the adapter landscape was created by @womblep, which this…
-
**Is your feature request related to a problem? Please describe.**
Organisations often has security policies that dictate restrict what TLS protocols and ciphers suites may be used in a production …
-
In practice the benefit of resilience with respect to server compromise of augmented PAKEs can only be obtained when using memory-hard PBKDF functions which will be parametrized by a workload paramete…
-
https://en.wikipedia.org/wiki/Cipher_suite
-
### Version of the software
0.2.4
### Operating system
Windows Server 2019
### Browser / Native
Chrome
### What happened?
According to https://github.com/salesforce/ja3
> JA3 i…
ghost updated
5 months ago
-
### Description
The current documentation for the https-cipher-suites option, either from the command line or the environment variable KC_HTTPS_CIPHER_SUITES, does not explain how the ciphers should …
-
**Describe the issue**
Check `CKV_AZURE_218 - "Ensure Application Gateway defines secure protocols for in transit communication"` is failing in the following scenario :
```
Check: CKV_AZURE_218: …
-
The OpenID4VP spec is unclear on how to advertise what data formats are supported. We will need decide what to do for our implementation and document this. Below is an overview of the bits of availabl…