[0xC001]

0xC001 == TLS_ECDH_ECDSA_WITH _NULL_SHA

[[0xC001] @ECCTLS]

@DennisF I tried, but going up to every bald person and yelling “hi Dennis” hasn’t worked out yet 🙃

[[0xC001] @ECCTLS]

There seems to be a lot of misplaced rage … instead, direct that ire at the vendors that don’t support automation. The best time was 5 years ago, the second best time is now.

[The Register @TheRegister]

Sysadmins rage over Apple’s ‘nightmarish’ SSL/TLS cert lifespan cuts https://t.co/KXztA6rtja

[[0xC001] @ECCTLS]

@IanColdwater Great job!

[[0xC001] @ECCTLS]

@BenLaurie @julianor @dfaranha If it’s got SCTs, paste it in here and check out what CT log it went to

https://t.co/UY8QAid8iN

[[0xC001] @ECCTLS]

The only issue I had was that they played the Casio demo song while Ken held a Korg.. 🙃

[🎻 ➡️ BlueSky @ericlaw]

That they pulled off Barbie is truly impressive.

Amazing music choices really helped.

[[0xC001] @ECCTLS]

@IanColdwater 🪗

[[0xC001] @ECCTLS]

@smartereveryday Cryptography Engineer

[[0xC001] @ECCTLS]

@sirus @DennisF If the TLS session isn’t new, it could have validated the cert prior to expiration and used session resumption to continue with the old TLS context. Browsers can cache the cert and just show it when asked.

[[0xC001] @ECCTLS]

Why would you use CommonName inside an OtherName in a SubjectAltName, for validation that a node is part of a collection of nodes‽ (DNSNames are still used for validation that you’re connecting to the correct server, at least if you don’t turn that off)

https://t.co/m0wIul00oP

[[0xC001] @ECCTLS]

@durumcrustulum @matthew_d_green Yes.. but not encrypted
Good news though, they state that up front

[[0xC001] @ECCTLS]

@bradfitz Should have listened to Taylor Swift..

https://t.co/uByMI7ncCg

[SwiftOnSecurity @SwiftOnSecurity]

THE FILTER IN THE BOTTOM OF THE DISHWASHER OH MY GOD

[[0xC001] @ECCTLS]

@BRIAN_____ @kennwhite Banks love GCM, card issuers love 3DES

[[0xC001] @ECCTLS]

@durumcrustulum Oops.. spoiler alert 🤦‍♂️

[[0xC001] @ECCTLS]

TLS_ECDHE_PSK_WITH_NULL_SHA384

[Jake Williams @MalwareJake]

Illustrating security concepts: sure you have integrity and availability, but without confidentiality, does it really matter?

[[0xC001] @ECCTLS]

They should’ve asked the TLS working group to come up with the new version…

[[0xC001] @ECCTLS]

@mikko @Scott_Helme Use a binary QR code with the data split into compressed RAR file parts and I bet you could store the book in even less..

[[0xC001] @ECCTLS]

@durumcrustulum [(5, x+4)] such that [(5)] is my hat

[[0xC001] @ECCTLS]

@mckeay It’s better to coffee with old beans than to never have coffied at all