What is SSL and why is it not enough when it comes to encryption?
Answer / chaitanya
SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.
| Is This Answer Correct ? | 0 Yes | 1 No |
What is the Three-way handshake? How can it be used to create a DOS attack?
On a Windows network, why is it easier to break into a local account than an AD account?
What is the Chain of Custody?
Why would you bring in an outside contractor to perform a penetration test?
You are an employee for a tech department in a non-management position. A high-level executive demands that you break protocol and allow him to use his home laptop at work. What do you do?
What are the most common computer applications?
Why would you want to use SSH from a Windows pc?
What is residual risk?
What’s the difference between Symmetric and Asymmetric encryption?
What’s better, a red team or a blue team?
What is meant by computer application?
1. Assume that passwords are selected from four-character combination of 26 alphabetic characters. Assume that an adversary is able to attempt passwords at a rate of one per second. a. Assuming no feedback to the adversary until each attempt has been completed, what is the expected time to recover the correct password? b. Assuming feedback to the adversary flagging an error as each incorrect character is entered, what is the expected time to discover the correct password?