Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Johanna Amann
Security Boulevard
NIST Releases New Report on Crypto-Agility – What You Need to Know Now | | crypto-agility, NIST, Post-Quantum Cryptography, PQC migration, PQC readiness, SHA-1 to SHA-2, TLS 1.1, TLS 1.2, TLS 1.3 If you’re keeping up with post-quantum cryptography (PQC), here’s some big news: The U.S. National Institute of Standards and Technology (NIST) has released a fresh initial public draft of a Cybersecurity Whitepaper ...
Security Boulevard
By Johanna Amann, Software Engineer, Corelight CVE-2020-13777 is a high severity issue in GnuTLS. In a nutshell, GnuTLS versions between 3.6.4 (released 2018-09-24) and 3.6.14 (2020-06-03) have a serious bug in their session resumption code, which lets attackers either completely decrypt observed traffic (for TLS versions up to 1.2), or perform a man-in-the-middle (MITM) attack on the server (for TLS version 1.3).
Mission accomplished? HTTPS security after DigiNotar | APNIC Blog
Certificate Authorization (CA) compromises, like the infamous DigiNotar case in 2011, have demonstrated how real the risks of man-in-the-middle (MITM) and other attacks are. In the years since the incident, a number of new security features have been added to Transport Layer Security (TLS), HTTPS, and the web Public Key Infrastructure (PKI). These features aim to make the CA system auditable, prevent MITM attacks, and/or prevent illegitimate certificate issuances.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Johanna
Contact Johanna, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack