VirtualTam's bookmarks

1. passkeys - Hello passkeys! Goodbye passwords. 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser/chrome, internet/browser/firefox, mobile/android, mobile/ios, security/authentication

   [ permalink ]

   Passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing-resistant.

   • https://fidoalliance.org/passkeys/
   • Apple Developer - Passkeys Overview
   • Apple Support - About the security of passkeys
   • Google Identity - Passwordless login with passkeys
   • Google Blog - The beginning of the end of the password
   • Google Security Blog - So long passwords, thanks for all the phish
   • Chromium BLog - Introducing passkeys in Chrome
   • Tailscale doesn't want your password
   • Tailscale - Custom OIDC Providers
   • YubiKeys, passkeys and the future of modern authentication
   • A Yubico FAQ about passkeys
   • Why Passkeys Will Be Simpler and More Secure Than Passwords
   • Passkeys: A shattered dream
2. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

   [ permalink ]

   The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

   • Guide to Web Authentication
   • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
   • Issue 664630: Web Authentication API for Chrome
   • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
   • keepassxc#1870 - Feature Request: Integration with the Web Authentication API
3. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

   tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

   [ permalink ]

   • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
   • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
   • https://github.com/ansible/ansible/issues/11347
4. Diffie-Hellman Key Exchange 2019-06-24

   tags: cryptography, cryptography/elliptic-curve, cryptography/encryption, cryptography/public-key-infrastructure, security

   [ permalink ]

   • https://security.stackexchange.com/questions/35471/is-there-any-particular-reason-to-use-diffie-hellman-over-rsa-for-key-exchange
   • https://security.stackexchange.com/questions/45963/diffie-hellman-key-exchange-in-plain-english
   • https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman
   • https://en.wikipedia.org/wiki/Forward_secrecy
5. High Performance Browser Networking | Ilya Grigorik 2019-06-24

   tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

   [ permalink ]

   • https://hpbn.co/webrtc/
   • https://hpbn.co/transport-layer-security-tls/
   • https://hpbn.co/webrtc/
6. OpenVPN Community Software 2018-05-24

   tags: cryptography/public-key-infrastructure, cryptography/rsa, linux, network, network/transport-layer-security, network/vpn, security

   [ permalink ]

   • https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
   • https://openvpn.net/index.php/open-source/documentation/howto.html
   • https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html
   • https://wiki.archlinux.org/index.php/OpenVPN
   • https://wiki.archlinux.org/index.php/Easy-RSA
   • https://wiki.debian.org/OpenVPN
7. Setup DKIM (DomainKeys) for Ubuntu, Postfix and Mailman - Ask Ubuntu 2017-08-30

   tags: cryptography/public-key-infrastructure, email, email/dkim, email/postfix, linux, signature

   [ permalink ]
8. synchronize - A wrapper around rsync to make common tasks in your playbooks quick and easy. — Ansible Documentation 2017-08-25

   tags: configuration-management/ansible, cryptography/public-key-infrastructure, data, network/ssh, rsync

   [ permalink ]

   SYNCHRONIZE MODULE IS BAD! AND YOU SHOULD FEEL BAD!

   => Use rsync in a command / shell task with SSH configuration / identities

   • https://www.reddit.com/r/ansible/comments/53ix3o/using_synchronize_over_ssh/
   • https://twitter.com/dfed/status/776853915618926592
   • https://docs.ansible.com/ansible/latest/playbooks_delegation.html
9. Ansible | Setup SSH PKI authentication between two hosts 2017-08-22

   tags: configuration-management/ansible, cryptography/public-key-infrastructure, host, network/ssh, variable

   [ permalink ]

   • https://docs.ansible.com/ansible/latest/playbooks_conditionals.html#register-variables
   • https://docs.ansible.com/ansible/latest/authorized_key_module.html
   • https://stackoverflow.com/questions/25629933/ansible-copy-ssh-key-from-one-host-to-another#25644384
   • https://stackoverflow.com/questions/35808649/ansible-accessing-register-variables-from-other-plays-within-same-playbook
   • https://stackoverflow.com/questions/33896847/how-do-i-set-register-a-variable-to-persist-between-plays-in-ansible
   • https://serverfault.com/questions/638507/how-to-access-host-variable-of-a-different-host-with-ansible
   • https://github.com/ansible/ansible/issues/1934
10. certificate - What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats? - Server Fault 2017-06-16

    tags: cryptography/certificate, cryptography/public-key-infrastructure, format, key, network/transport-layer-security, openssl, security

    [ permalink ]

    YO DAWG! I SAW YOU LIKE STANDARDS...

11. public key - Why is elliptic curve cryptography not widely used, compared to RSA? - Cryptography Stack Exchange 2013-07-08

    tags: cryptography, cryptography/elliptic-curve, cryptography/public-key-infrastructure, cryptography/rsa

    [ permalink ]