Skip to content
SelfSec
Join the launch listLaunch list
SelfSec
Vulnerability field guide

TLS Configuration

A padlock in the address bar does not prove the channel is sound. Here is how legacy TLS versions, weak cipher suites, faulty certificates, cleartext redirect hops and missing HSTS expose traffic to anyone on the path, and a configuration that closes them.

1 article 8 min total Overview to advanced techniques

Start with the overview

TLS Configuration8 min read

TLS Misconfiguration, Explained: Old Protocols, Broken Certificates and the Hop That Drops HTTPS

A padlock in the address bar does not prove the channel is sound. Here is how legacy TLS versions, weak cipher suites, faulty certificates, cleartext redirect hops and missing HSTS expose traffic to anyone on the path, and a configuration that closes them.

Read the overview