Better Crypto • org

The definitive guide to applied crypto hardening

Retweets do not imply endorsement, think for yourself!

[Better Crypto • org @BetterCrypto]

@alvar_f @reg_nerd @_stk @Rince123 @Twenty_Sixer @0xbj00rn @eGouvernante @HonkHase @BSI_Bund Danke für die Blumen. Bitte beachtet, daß de-facto alles was wir damals produziert haben inzwischen veraltet ist. Ungetestet auf aktuellen Systemen und die kryptografischen Empfehlungen überholt sind!

Der Guide ist in dem Umfang ehrenamtlich/unbezahlt nicht mehr zu stemmen.

[Better Crypto • org @BetterCrypto]

@iso27032 Sometimes autorenewal breaks outside if one‘s planning. Thanks Debian… #Not

#JustASuggestion

[Better Crypto • org @BetterCrypto]

@rinnzekete Should be working again!

[Better Crypto • org @BetterCrypto]

@iso27032 Should be working again!

[Better Crypto • org @BetterCrypto]

@rinnzekete Working on it… Debian is just too old for this world…

[Better Crypto • org @BetterCrypto]

@iso27032 @letsencrypt Working on it… Debian is just too old for this world…

[Better Crypto • org @BetterCrypto]

@backstube Your contributions of test in any OS is highly appreciated. Please send pull requests. Especially for these “tested in …” things we have to rely on users of that OS.
Also check out the current release on github for more up to date settings.

Thanks for contributing!

[Better Crypto • org @BetterCrypto]

@drwetter @sys4_AG We're aware and working hard on an update which is a lot of work.

We've significantly simplified the contribution process by moving from LaTeX to asciidoc.

If you want to contribute, please file an issue or, even better, send a pull request we can discuss!

[sys4 AG @sys4_AG]

Kurz vor Weihnachten 2018 haben wir mit etlichen Kollegen intensiv daran gearbeitet, @BetterCrypto von LaTeX nach AsciiDoc zu portieren. Damit werden zukünftige Ergänzungen einfacher und schneller umsetzbar. Das Ergebnis des Sprints ist jetzt online: https://t.co/u6ulVST2IP

[hanno @hanno]

#35c3 slides "The Rocky Road to TLS 1.3" with hopefully most typos fixed and missing paper references added https://t.co/pRYT6cXzY4 Will also update in frab/fahrplan.

[sys4 AG @sys4_AG]

@joostd @BetterCrypto @patrickbkoetter @endres_jo Yes, indeed. We have planned and organised two days of Bettercrypto hacking, so expect some more notifications for today.

[sys4 AG @sys4_AG]

Mittagspause beim @BetterCrypto Hacken. Der Chef hat Schweinsbraten gemacht. #opensource #bettercrypto

[sys4 AG @sys4_AG]

Heute und morgen im Büro: gemeinschaftliches Arbeiten an @BetterCrypto mit @patrickbkoetter, @endres_jo, Andreas, ein paar Kollegen in der Konferenzspinne, ein paar Kollegen nicht im Bild. Einer unserer Wege, der OpenSource-Community was zurück zu geben. #bettercrypto #opensource

[David -- 🇪🇺 😈 🇧🇪 @ddurvaux]

From what I hear, there is still a need for @BetterCrypto and it should be extended to users. #digitec18. And no, it’s not a dead project!!

[Better Crypto • org @BetterCrypto]

@_043 The current status is roughly “large parts are outdated” but our cipher recommendations are not insecure, though less than optimal for sure.
We're working on an updated guide. It's a slow process due to people's availability at the moment.

An update is coming, but not soon.

[exploresecurity @exploresecurity]

Remember, after 30 June SSL and TLSv1.0 cannot be used as security controls for #PCI #DSS (with some wiggle room for POS POI environments).

Nice 2-page summary at https://t.co/HzeXhhXJQS

[OpenSSL announce @OpenSSLannounce]

OpenSSL Security Advisory https://t.co/RVJ21gzjQG