This article explains how you can set up SSL vhosts under nginx on Ubuntu 11.04 and Debian Squeeze so that you can access the vhost over HTTPS (port 443). SSL is short for Secure Sockets Layer and is a cryptographic protocol that provides security for communications over networks by encrypting segments of network connections at the transport layer end-to-end.
Read more »Installing Subversion & Enabling Access Via Different Protocols (Debian Squeeze)
Subversion (svn) is an open-source version control system (VCS), used in the development of many software projects. This tutorial shows how to install Subversion on Debian Squeeze and how to configure it to allow access to a repository through different protocols: file://, http://, https://, svn://, and svn+ssh://.
Read more »- Login to post comments
Hosting Multiple SSL Web Sites On One IP With Apache 2.2 & GnuTLS (Debian Lenny)
This tutorial describes how you can host multiple SSL-encrypted web sites (HTTPS) on one IP address with Apache 2.2 and GnuTLS on a Debian Lenny server.
Read more »Category: End User Tags:
- Login to post comments
EFF Tool Offers New Protection Against 'Firesheep'
The Electronic Frontier Foundation (EFF) has launched a new version of HTTPS Everywhere, a security tool that offers enhanced protection for Firefox browser users against "Firesheep" and other exploits of webpage security flaws.
Read more »- Login to post comments
Decrypt HTTPS Traffic Using Wireshark And Key File
Wireshark is a useful tool in troubleshooting. Wireshark can decrypt SSL traffic as long as you have the server private key. This can be extremely useful, if you have to debug HTTPS traffic and cannot use HTTP instead.
Read more »Category: End User Tags:
- Login to post comments
The Message of Firesheep: "Baaaad Websites, Implement Sitewide HTTPS Now!"
Firesheep demonstrates a security flaw that the computer security community has been concerned about for years — that any network eavesdropper can take over another user's session (say, a login to a webmail or social networking account) just by sniffing packets and copying the victim's cookie
Read more »- Login to post comments
HTTPS Extension Adds Default SSL Browsing to Firefox
The Tor Project and the Electronic Frontier Foundation have released HTTPS Everywhere, a Firefox extension that activates SSL/TSL encryption on sites that support the security setting, but don't feature it as a default when visiting because of partial support, unsecured trackback links or other issues. To alleviate this problem, HTTPS Everywhere writes all requests in HTTPS.
Read more »Category: End User Tags:
- Login to post comments
How To Set Up An SSL Vhost Under Apache2 On Ubuntu 9.10/Debian Lenny
This article explains how you can set up an SSL vhost under Apache2 on Ubuntu 9.10 and Debian Lenny so that you can access the vhost over HTTPS (port 443). SSL is short for Secure Sockets Layer and is a cryptographic protocol that provides security for communications over networks by encrypting segments of network connections at the transport layer end-to-end.
Read more »GNU TLS preferred instead of OpenSSL
"Today I finally decided to work out this element of our task list. We are happy that now MyServer can be distributed under the GPLv3 terms license without any exception. Previously we were using OpenSSL for the HTTPS protocol, it was giving us some licensing troubles as we needed to add an exception to the original GPLv3 license..."
Read more »Category: High End Tags:
- Login to post comments
Mozilla SSL policy bad for the Web
"Mozilla Firefox 3 limits usable encrypted (SSL) web sites to those who are willing to pay money to one of their approved digital certificate vendors. This policy is bad for the web. Not only does it make users less secure overall by reducing the number of encrypted connections, it damages the basic principle of equality among web participants..."
Read more »Category: Community Tags:
- Login to post comments