January 13, 2020

81 words 1 min read

Let's Encrypt with Dane

Let's Encrypt with Dane

A discussion of the limitations of browser-based SSL security on the Internet and experiences using DANE TLSA resource records to validate server certificates. …
Talk Title Let's Encrypt with Dane
Speakers Geoff Huston (APNIC)
Conference NANOG69
Conf Tag
Location Washington, D.C.
Date Feb 6 2017 - Feb 8 2017
URL Talk Page
Slides Talk Slides
Video Talk Video

A discussion of the limitations of browser-based SSL security on the Internet and experiences using DANE TLSA resource records to validate server certificates.

security internet
comments powered by Disqus
Struts 2, Equifax, and you: The story of the worst breach in history (sponsored by Contrast Security)

Struts 2, Equifax, and you: The story of the worst breach in history (sponsored by Contrast Security)

January 6, 2020

Arshan Dabirsiaghi explains what Contrast Security learned from the Struts 2 exploit and details how to stop the next attack against your production apps.
Building Container Base Application Delivery System for IoT Platform

Building Container Base Application Delivery System for IoT Platform

January 5, 2020

The Internet of Things (IoT) devices are generating a large amount of data, and many companies are utilizing them. The data, that generated by IoT devices such as sensor, often must be analyzed very r …
A Look at Running Containers in a Hostile Environment

A Look at Running Containers in a Hostile Environment

January 2, 2020

NorthSec is one of the biggest on-location security contests (Capture The Flag) in the world. It's also one of the biggest deployments of LXC, albeit only for a weekend. It is unique not only because …
Tutorial: Service Orchestration - Way Beyond SDNFV Orchestration - Presented by MEF

Tutorial: Service Orchestration - Way Beyond SDNFV Orchestration - Presented by MEF

December 16, 2019

While service providers are quickly ramping up their capabilities to orchestrate Virtualized Network Functions and SDN components, many are starting to realize that work gets them only part way to the …
Resiliency in a service provider world (sponsored by NS1)

Resiliency in a service provider world (sponsored by NS1)

December 13, 2019

Today we depend upon service providers (for storage, compute, network, DNS, CDN, and much more) to build and deliver our applications. Even when the most sophisticated service providers on the internet failand they doits still possible to build resilient applications. Kristopher Beevers explores how ops teams and developers are thinking about resiliency in a service provider world.
Finding your way in the dark: Security from first principles

Finding your way in the dark: Security from first principles

November 25, 2019

As a community, we talk a lot about security goals and trade-offs and about the controls we may use to get there. What we don't talk enough about is first principles. Susan Sons shares the seven information security practice principles developed with her team at IU CACR and introduces a mental model for reasoning about security instead of trying to memorize for security.