Communication Security

Reliable information exchange requires secure communication.

Regina Okun

Published on 15.02.2018 published.

What is Payment Diversion?

Two internet giants fell for the Payment Diversion scam – could the same thing happen to your company? (read more)

Authentication Best Practice Guide E-Mail Hardening Social Engineering Company

Andreas Sperber

Published on 21.07.2017 published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption

Andreas Sperber

Published on 31.05.2017 published.

Trust is Good. Verification is Better.

Andreas Sperber spoke about trust problems in PKIs at the 17th GPN. With "Trust is Good. Verification is Better.", he calls on service providers to take action. (read more)

Certificate Transparency (CT) Chaos Computer Club (CCC) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Public Key Infrastructure (PKI)

Andreas Sperber

Published on 17.04.2017 published.

Certificate Transparency – Transparency in the Certificate Jungle

Certificate Transparency is a system for monitoring certificates. For Google Chrome, it has been mandatory since October 2017. We report on what needs to be considered. (read more)

Certificate Transparency (CT) Public Key Infrastructure (PKI) Encryption X.509

Andreas Sperber

Published on 21.03.2017 published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509