10/07/2014

De nieuwe De Morgen has renewed its certificates but not their bad configuration

ssllabs.com

first if you type demorgen.be instead of www.demorgen.be when you want to log in than you will have a pop up with a warning that the certificate is not configured for this domain  oops

now if we log in than there seem to be some problems with the configuration of the certificate itself

in fact it uses very weak encryption that can easily be broken

there is also a beast attack possible, don't worry real specialists know what that means

for you it means that you shouldn't use passwords you use for other more important services

because if they are hacked or they lose their database with logins it can be decrypted

it looks like security but it isn't secure enough to give any security

Permalink | |  Print |  Facebook | | | | Pin it! |

The comments are closed.