About this blog

A collection of information security-related posts and resources on the web for my reference. And for yours too if you're so inclined.

Wednesday, August 01, 2012

SSL versus TLS

TLS (Transport Layer Security) and SSL (Secure Sockets Layer) are protocols that provide data encryption and authentication between applications in scenarios where that data is being sent across an insecure network, such as checking your email...

SSL versus TLS

Thursday, July 26, 2012

Vulnerability Scanning Web 2.0 Client-Side Components

Web 2.0 applications are a combination of several technologies such as Asynchronous JavaScript and XML (AJAX), Flash, JavaScript Object Notation (JSON), Simple Object Access Protocol (SOAP), Representational State Transfer (REST). All these technologies, along with cross-domain information access, contribute to the complexity of the application. We are seeing a shift towards empowerment of an end-user's browser by loading libraries.

Vulnerability Scanning Web 2.0 Client-Side Components

Saturday, May 12, 2012

Summarizing PKI Certificate Validation

Security certificates and the methods used by websites to show that they are secure enough for users to trust are notoriously complex. To shed a little light on this, I’m going to explain how PKI certificate validation works.

Summarizing PKI Certificate Validation

Wednesday, May 09, 2012

Datacenters need shutdown/startup order

What hits close to home for me about this article is the need for datacenter playbooks which outline a shutdown/startup order of infrastructure and servers.

Datacenters need shutdown/startup order