#security (2024-02)
Archive: https://archive.sweetops.com/security/
2024-02-06
Hey everyone! Given that 3DES ciphers are susceptible to SWEET32 attacks, I’m on a mission to secure our CloudFront domains. However, I’ve hit a snag: the most up-to-date security policy I can apply is TLSv1.2, which, to my surprise, still supports 3DES. Does anyone know if there’s a method to exclude 3DES ciphers from CloudFront? Alternatively, is there a way to customize the security policy manually? Appreciate any insights or guidance!
...with this feature, you can select the security policy that enforces TLS version 1.1 and weak ciphers such as RC4 and 3DES will automatically be excluded...
^ Hope it helps.
2024-02-07
2024-02-12
yoo anybody know any good alternative to Weaveworks Ignite Firecracker vm – that has docker images lol (Weaveworks is shutting down apparently)
2024-02-13
2024-02-26
Hi Everyone! Does anyone know a good alternative to freeipa? Is freeipa the best for managing access to Linux machines?