Blog

Stay up to date with our information security blog.

Regina Okun

Published on 09.11.2017 in the category aramido published.

Keynote: IT Symposium at Haigerloch Castle

aramido delivered the keynote at the 15th IT Symposium at Haigerloch Castle: four paradigms for tomorrow's information security. (read more)

BSI-Grundschutz Business Continuity Management (BCM) Digital Forensics • IT Forensics DSGVO Hardening Incident Response ISO 27001 IT Risk Management Live Hacking Social Engineering Company Event Economic Espionage

Andreas Sperber

Published on 21.07.2017 in the category Communication Security published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption

Andreas Sperber

Published on 31.05.2017 in the category Communication Security published.

Trust is Good. Verification is Better.

Andreas Sperber spoke about trust problems in PKIs at the 17th GPN. With "Trust is Good. Verification is Better.", he calls on service providers to take action. (read more)

Certificate Transparency (CT) Chaos Computer Club (CCC) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Public Key Infrastructure (PKI)

Andreas Sperber

Published on 17.04.2017 in the category Communication Security published.

Certificate Transparency – Transparency in the Certificate Jungle

Certificate Transparency is a system for monitoring certificates. For Google Chrome, it has been mandatory since October 2017. We report on what needs to be considered. (read more)

Certificate Transparency (CT) Public Key Infrastructure (PKI) Encryption X.509

Andreas Sperber

Published on 21.03.2017 in the category Communication Security published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509