websec

Question 1

How to we protect against TLS downgrade attack?

Answer 1

If a client had tried a higher TLS version before, it appends a signaling cipher suite value to the TLS 1.1 handshake. this value tells the server that the client supports a higher TLS version.

Question 2

How can we make sure that a certificate is adhered to the CA guidelines? mention one solution.

Answer 2

Public logs like CT certificate transparency.

Question 3

What is certificate transparency? and what are its problems?

Answer 3

make transparent who issued a certificate to whom. Problem that it is just a after the fact solution meaning that we can only know that a certificate isnt adhered to the guidlines but we can not do anything about it.

Question 4

What are the parts of the certificate transparency? give short explanation for each

Answer 4

1. Public ct logs - idk
2. Log monitoring - continuously verify that entities are only added and not removed or edited.
   3.public certificate auditing - perform inclusion checks of certificates.

Question 4

What are the parts of the certificate transparency? give short explanation for each

Answer 4

1. Public ct logs - idk
2. Log monitoring - continuously verify that entities are only added and not removed or edited.
   3.public certificate auditing - perform inclusion checks of certificates.