Ocsp

In this post, we will look at X.509 certificates, CSR, Certificate fields, CRL, and OCSP. Here are the links to other posts in this series. Digital Certificate series — Part 1 This four-part series will discuss various topics related to digital certificates. I have divided the content into four…deepaksinghrw.medium.com Explained — Digital Certificate — Part 3 So far, I have covered the certificate basics in Part 1 & Part 2 of the four-part series about digital certificates.deepaksinghrw.medium.com

tl;dr: Scroll down to the last section. “Why is Apple spying on us?” The rumbles from those with tinfoil hats have reached its peak over the last couple of days. On macOS Big Sur’s launch day, Apple’s OCSP server got extremely slow, and people noticed it. Jeffrey Paul’s post “Your Computer Isn’t Yours” accused Apple…

Denying OCSP connection could mitigate the issue — Disclaimer The information below is not a silver bullet to every performance issues cause by BigSur. Use it at your own risk! The Intention To prevent trustd from checking the validity of a digital certificate of an application via a request to the Online Certificate Status Protocol (OSCP). What is OSCP? The OCSP responder is responsible…

This is my 19th box out of 42 boxes for OSCP preparation. I am doing my best learning and mastering the key skills for my upcoming OSCP exams by writing this series of blogs. Most of the write-up I get help from watching Ippsec’s YouTube videos and reading Rana Khalil’s…

This is my 13th box out of 42 boxes. I am doing my best learning and mastering the key skills for my upcoming OSCP exams by writing this series of blogs. Most of the write-up I get help from watching Ippsec’s YouTube videos and reading Rana Khalil’s write-ups. Please feel…

Online Certificate Status Protocol (OCSP) stapling is a standard for checking certificate revocation. Most commonly deployed on web servers using TLS and required if you’re aiming for an A+ on Qualys SSL Server Test. Even better, CloudFlare reports connection time improvement by up to 30% in some cases. [0] The…

Legacy is another windows machine that demonstrates the Etenalblue exploitation that works on all the Windows versions prior to Windows 8. Reconnaissance Usual full Nmap scan was run

We are a single unencrypted HTTP GET request away from getting MITMed. Think about it, If I can see the host you are consuming and you are not asking me to verify myself that is the jackpot for attackers. In this post, I want to go through how the browser…