Tls

Articles about Tls

Securing nginx configurations: implementing OCSP stapling

certificates
cryptography
nginx
ssl
tls
web

OCSP stapling is a logical follow-up on Online Certificate Status Protocol. With newer versions of Nginx we can enable OCSP stapling and enable testing.

Protect Linux systems against SSLv3 Poodle vulnerability

openssl
ssl
tls
web

The Poodle vulnerability was discovered in October 2014, putting all systems using SSL 3.0 at risk. Here is what to do to protect against it.

Protect against the BEAST attack in Nginx

hardening
nginx
ssl
tls

The BEAST attack showed up in 2011 and some servers are still vulnerable to it. With the right protocols, ciphers and preference, we can keep the BEAST out.