• Nov 14, 2018
  • Derek Zimmer
  • Cybersecurity, General Privacy News, Surveillance,

SuperCooKey – A SuperCookie Built Into TLS 1.2 and 1.3

In doing my research around the impact of TLS 1.3 for Private Internet Access, I came across some peculiar items in the new standards. TLS 1.3 represents a relatively large shift in cryptography, so much so that it was debated whether it should be called TLS 2.0 rather than 1.3. It throws away a lot … Continue reading “SuperCooKey – A SuperCookie Built Into TLS 1.2 and 1.3”

0

  • Aug 15, 2018
  • Derek Zimmer
  • Censorship, Cybersecurity, General Privacy News, Governments,

TLS 1.3 is Coming – an Opportunity for Amazon, Google and Microsoft to End Censorship

A new standard for cryptography is on the horizon, called Transport Level Security 1.3 (TLS 1.3). TLS 1.3 is a major update to cryptography, and fundamentally changes how websites and services will handle negotiating and executing encrypted services. Among the big improvements are faster handshakes with websites (meaning faster page load times), new ciphers (new … Continue reading “TLS 1.3 is Coming – an Opportunity for Amazon, Google and Microsoft to End Censorship”

0

  • Jun 11, 2016
  • Caleb Chen
  • Encryption, General Privacy News,

Thanks to TeLeScope, TLS Communication With Your Virtual Servers Can Now Be Unencrypted

Earlier this week, BitDefender demonstrated the TeLeScope technique, which allows an attacker to decrypt TLS communication between a target and a virtualized server. TLS stands for Transport Layer Security and is widely used. The TeLeScope technique is both operating system agnostic and crypto library agnostic. Any TLS key that is generated on a virtualized server … Continue reading “Thanks to TeLeScope, TLS Communication With Your Virtual Servers Can Now Be Unencrypted”

5