/explore
|
You are here |
blog.uvokchee.de | ||
| | | | |
www.netmeister.org
[AI summary] The text discusses DNSSEC and DANE, their potential benefits for enhancing security, and the challenges in their adoption. It highlights the importance of these technologies in securing communications and the current limitations in browser and client support. The author also reflects on the trade-offs and complexities involved in implementing DNSSEC/DANE and considers alternative security solutions. |
|
| | | | | ||
| | | | |
staex.io
DNS protocol is one of the attack vectors on your corporate network and IoT devices in particular. Most operating systems access DNS servers using legacy unencrypted protocol by default despite the fact that there are modern secure enhancements for this protocol: DNSSEC, DNS-over-HTTPS, DNS-over-TLS. In this article we discuss these enhancements and explain how to configure them in your network. |
|
| | | | | ||
| | | | |
danielms.site
I build things and drink coffee. |
|
| | | | | ||
| | | | |
pboyd.io
Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... |
|
| | | |||