VirtualTam's bookmarks

1. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
2. Sequoia-PGP - OpenPGP Implementation in Rust 2023-11-09

   tags: command-line, cryptography/encryption, cryptography/pgp, cryptography/pgp/gnupg, linux/debian, linux/fedora, programming/rust, security

   [ permalink ]

   • Sequoia PGP: A Sapling Matures: Meet sq 1.0
   • Talk about OpenPGP interop testing at the IETF 110
   • sequoia-pgp/sequoia - APIs for dealing with OpenPGP data
   • sequoia-pgp/sequoia-sq - the Sequoia-PGP command line tool
   • RpmSequoia
3. HAProxy - TLS Termination Setup 2023-07-24

   tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

   [ permalink ]

   • Traffic Routing - Rewrite Requests
   • Client IP Preservation - X-Forwarded-For
   • HAProxy & HTTP Strict Transport Security (HSTS)
   • Secure Cookies Using HAProxy Enterprise
4. Cloudflare Research | OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks 2022-07-12

   tags: cloud-computing/cloudflare, cryptography/encryption, security/authentication, security/password

   [ permalink ]

   • https://blog.cloudflare.com/opaque-oblivious-passwords/
   • OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks
   • https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-opaque
   • https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/
5. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

   tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

   [ permalink ]
6. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

   tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

   [ permalink ]
7. CALOMEL - Open Source Research and Reference 2019-12-21

   tags: bsd, cryptography/encryption, email, linux, network, network/http, security, server, unix, web

   [ permalink ]
8. hashcat - advanced password recovery 2019-11-04

   tags: cryptography/encryption, cryptography/hash, security, security/password

   [ permalink ]

   • https://hashcat.net/wiki/
   • https://github.com/hashcat/hashcat
9. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

   tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

   [ permalink ]
10. The GNU Privacy Handbook - Key Management - Subkeys 2019-07-30

    tags: cryptography/pgp, cryptography/pgp/gnupg, source-code-management/git

    [ permalink ]

    • What exactly is a subkey?
    • Improve the Security of Your OpenPGP Key by Using Subkeys
    • PGP - Why have separate encryption subkey
    • Using OpenPGP subkeys in Debian development
    • PSA: want to use a new subkey to sign your commits?
11. Self Hosted Email - Understanding DMARC : selfhosted 2019-07-22

    tags: cryptography/encryption, email, email/dkim, email/dmarc, email/spf, self-hosting

    [ permalink ]

    • https://www.m3aawg.org/activities/training/dmarc-training-series
    • https://www.m3aawg.org/system/files/M3AAWG_DMARC_Training_2012-10-All-a_0.pdf
    • https://dmarc.org/presentations/Email-Authentication-Basics-2015Q2.pdf
12. gopenpgp: A high-level OpenPGP library 2019-06-27

    tags: cryptography/encryption, cryptography/pgp, gpg, programming/go, security

    [ permalink ]

    • https://gopenpgp.org/
    • https://protonmail.com/blog/openpgp-golang/
13. Diffie-Hellman Key Exchange 2019-06-24

    tags: cryptography, cryptography/elliptic-curve, cryptography/encryption, cryptography/public-key-infrastructure, security

    [ permalink ]

    • https://security.stackexchange.com/questions/35471/is-there-any-particular-reason-to-use-diffie-hellman-over-rsa-for-key-exchange
    • https://security.stackexchange.com/questions/45963/diffie-hellman-key-exchange-in-plain-english
    • https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman
    • https://en.wikipedia.org/wiki/Forward_secrecy
14. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
15. sops: Secrets management stinks, use some sops! 2019-06-18

    tags: cryptography/encryption, cryptography/pgp, gpg, linux/container/kubernetes, programming/json, programming/yaml, secret, security

    [ permalink ]

    • https://godoc.org/go.mozilla.org/sops
    • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
16. Google Online Security Blog: Introducing Adiantum: Encryption for the Next Billion Users 2019-02-13

    tags: algorithm, cryptography, cryptography/encryption, security

    [ permalink ]

    • https://github.com/google/adiantum
    • https://github.com/lukechampine/adiantum
    • https://tosc.iacr.org/index.php/ToSC/article/view/7360
17. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

    tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

    [ permalink ]
18. Project Wycheproof tests crypto libraries against known attacks 2019-01-17

    tags: cipher, cryptography, cryptography/encryption, programming/testing, security

    [ permalink ]

    • https://security.googleblog.com/2016/12/project-wycheproof.html
19. An Overview of Cryptography | Gary C. Kessler 2018-07-25

    tags: cipher, cryptography, cryptography/certificate, cryptography/encryption, cryptography/hash, security

    [ permalink ]

    • https://www.garykessler.net/library/securityurl.html
20. Let's Encrypt with HAProxy 2018-07-25

    tags: cryptography/certficate, letsencrypt, network/http, network/http-server/haproxy, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html