From: Silvio Date: Sun, 4 Dec 2011 15:05:33 +0000 (-0200) Subject: Fixes X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=65587744d7ab2a26e328fedc699b86a06ffc2d79;p=gestaossl.git Fixes --- diff --git a/cool.mdwn b/cool.mdwn index 88fbc8a..04bfd99 100644 --- a/cool.mdwn +++ b/cool.mdwn @@ -62,7 +62,6 @@ SSL === - Encapsulamento de outros protocolos -- HTTP Strict Transport Security - HSTS - CipherSuite e Perfect Forward Secrecy - Revogação (CRL / OCSP) - Autoridades Certificadoras (CAs) @@ -236,7 +235,8 @@ Mitigação Recentemente foram propostas várias formas de mitigação: -- [Certificate Patrol](https://addons.mozilla.org/pt-BR/firefox/addon/certificate-patrol/?src=search): muito útil porém sofre to problema de "bootstrapping"/secure introduction (Trust On First Use/Persistence of Pseudonym - TOFU/POP). +- [HTTP Strict Transport Security - HSTS](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security) +- [Certificate Patrol](https://addons.mozilla.org/pt-BR/firefox/addon/certificate-patrol/?src=search): muito útil porém sofre to problema de secure introduction (Trust On First Use/Persistence of Pseudonym - TOFU/POP). - [Certlock](https://code.google.com/p/certlock/) - IETF: - [Public Key Pinning Extension for HTTP](https://www.ietf.org/id/draft-evans-palmer-key-pinning-00.txt): também sofre do "problema de bootstrapping".