09 February 2016 17:00
15 December 2015 09:45
10 December 2015 11:45
10 December 2015 09:15
09 December 2015 13:00
02 December 2015 14:15
04 November 2015 12:15
New Chrome security policy: powerful features will be removed on insecure origins
by srcmax & 1 other
Google recently announced a security policy change that will impact future versions of the Chrome browser. Chrome is already warning that support to powerful features on insecure origins (HTTP) is deprecated, and according to recent announcements the removal will take place soon.
The impact of Google’s new Chrome security policy on WebRTC | TokBox Blog
by srcmax
After we published this post Google announced that they are pushing back the release date of the HTTPS security change. They’re estimating that it will now be released to production in December 2015.
04 November 2015 12:00
Deprecating Powerful Features on Insecure Origins - The Chromium Projects
by srcmax (via)
As with gradually marking HTTP as non-secure, we expect to gradually migrate these features to secure-only, based on thresholds of usage, starting with lowest usage and moving towards higher. We also expect to gradually indicate in the UX that the features are deprecated for non-secure origins.
06 July 2015 10:30
Guide to Deploying Diffie-Hellman for TLS
by dzc
Our study finds that the current real-world deployment of Diffie-Hellman is less secure than previously believed. This page explains how to properly deploy Diffie-Hellman on your server.
06 July 2015 10:15
25 May 2015 22:15
23 May 2015 11:45
08 April 2015 01:30
08 April 2015 01:15
29 January 2015 09:45
Dans Chrome, un site HTTP sera marqué non sécurisé
by srcmax
Comme vous le savez, Google pousse tout le monde à passer son site en HTTPS. La dernière trouvaille est que Chrome affiche un avertissement pour les sites en HTTP, indiquant qu'ils ne sont pas sécurisés...
15 January 2015 09:45
Let's Encrypt - Certificat SSL/TLS
by dzc & 2 others
a new Certificate Authority: It’s free, automated, and open.
Arriving Mid-2015
Anyone who has gone through the trouble of setting up a secure website knows what a hassle getting a certificate can be. Let’s Encrypt automates away all this pain and lets site operators turn on HTTPS with a shell command.
When Let’s Encrypt launches in Summer 2015, enabling HTTPS for your site will be as easy as installing a small piece of certificate management software on the server:
