SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test questions_Karen'

Karenzz
2023-05-25 19:17:40 +02:00
parent 523f14cc02
commit 2e69beebba
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test questions_Karen.md
+7 -2
@@ -66,12 +66,17 @@ There are also some other reasons, such as the session ID length as sequential s
* What symmetric and non-symmetric ciphers does your browser use when connecting to the following web sites: www.google.com www.neverssl.com www.sayweee.com * What symmetric and non-symmetric ciphers does your browser use when connecting to the following web sites: www.google.com www.neverssl.com www.sayweee.com
* www.google.com: The connection of this site is encryped and autheticated using QUIC, X25519, and AES_128_GCM
* What is the currently recommended strength, in bits, for AES when used in a TLS server? * What is the currently recommended strength, in bits, for AES when used in a TLS server?
*The currently recommended strength for AES when used in a TLS server is 128 bits.*
* Describe what an export-grade cipher is. Does this concept still apply in this day and age? Why or why not? * Describe what an export-grade cipher is. Does this concept still apply in this day and age? Why or why not?
*An export-grade cipher refers to a cryptographic algorithm that was intentionally weakened by design or limited in key size to comply with cryptographic export regulations that were prevalent in the late 20th century. *
* Describe the circumstances under which any web browser released after 2020 would accept a SHA-1 signed TLS certificate, if any. * Describe the circumstances under which any web browser released after 2020 would accept a SHA-1 signed TLS certificate, if any.
* Is an extended validation TLS certificate more cryptographically secure than a normally issued TLS certificate? * Is an extended validation TLS certificate more cryptographically secure than a normally issued TLS certificate?
* What is Let's Encrypt, and what incident caused the project to be founded? * What is Let's Encrypt, and what incident caused the project to be founded?