/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 maikel.pro
The current state of certificate revocation (CRLs, OCSP and OCSP Stapling)
| | www.grc.com
GRC's|SSL/TLS Certificate Revocation Awareness - The case for OCSP Must-Staple
2.1 parsecs away

Travel
| | SSL/TLS Certificate Revocation Awareness - The case for OCSP Must-Staple
| | www.agwa.name
Google's Certificate Revocation Server Is Down - What Does It Mean?
2.3 parsecs away

Travel
| | [AI summary] The article explains the impact of Google's offline OCSP responder affecting HTTPS connections for some non-Chrome clients, while noting Google's infrastructure standards compared to typical certificate authorities.
| | sslmate.com
How to Configure OCSP Stapling in Apache and nginx - SSLMate Blog
2.8 parsecs away

Travel
| | [AI summary] A technical guide explains what OCSP stapling is, its benefits for security and privacy, and provides specific configuration instructions for Apache and Nginx servers.
| | www.sjoerdlangkemper.nl
Attacking JWT authentication
21.5 parsecs away

Travel
| JSON Web Tokens or JWTs are used by some web applications instead of traditional session cookies. Because of their statelessness and the signature implementation there are some security issues that are specific to JWTs. This post describes some ways you can verify that a JWT implementation is secure.