Don't let just "anyone" issue a certificate for your domain! If you run your website, you probably secure it with HTTPS (if not, you really should). And if you're techy and smart, you're using Let's Encrypt to do so. This would mean that Let's Encrypt is your CA (Certificate Authority). [...]
If you use Threema, you probably know of the "Threema Web" feature.But did you know it's open source? So what's Threema Web? It's basically a web application, that connects with your phone and allows you to chat on your desktop through the browser. You can see all your chats in [...]
A quick update to -or continuation of- my previous post. FIDO U2F and FIDO2 FIDO U2F is a hardware-based second factor authentication which requires you to plug in a USB key (or NFC on phone) to authenticate against a website. It works on all major desktop browsers and does not [...]
Now that we covered virtualization on Mac, let's go over to Windows! Microsoft Hyper-V If you have Windows 10 Pro or better (includes Education and Enterprise), then you already have a native virtualization option on board! To enable it, simply open a PowerShell as administrator and type in following command: [...]
Just a quick one to share some options on virtualization on Mac. VMware Fusion Pro Although paid software, this is what I recommend going for, especially if you want to virtualize an ancient OS. Unlike some alternatives VMware provides drivers even for some ancient guest OS, so you can run [...]
Just wanted to share a one-liner on how to encrypt a device,partition or volume with cryptsetup (dm-crypt/luks)and options to get you started! The idea is simple: You create a crypto container on a disk/partition/volume/file/whatever, you then unlock that container, and then mount that container to a folder. When you're done [...]
Here's a list of OpenVPN clients I recommend for various platforms. Windows Use the official open source community client. https://openvpn.net/community-downloads/ Mac Use the open source Tunnelblick client which is both OpenVPN and GUI in one app. https://tunnelblick.net/ Linux Use your distribution package or compile OpenVPN from source. https://wiki.debian.org/OpenVPNhttps://fedoraproject.org/wiki/Openvpnhttps://wiki.archlinux.org/index.php/OpenVPN Android I [...]
What is HSTS and do I want to enable it?If you are a website owner or admin, keep reading to know more! Imagine you are browsing to your online banking page. You are redirected to HTTPS automatically every time, you sign in and do your business privately and all is [...]
Useful to use SSH securely using a smart card / hardware token / yubikey / etc. Prerequisites Of course, you need to have GPG installed on your system, and possibly some drivers and applications to support your smart card / hardware token if used. This guide assumes you already have [...]
This is just a quick post to share a hardened gpg.conf Usually stored in ~/.gnupg/gpg.conf personal-cipher-preferences AES256 AES192 AES personal-digest-preferences SHA512 SHA384 SHA256 personal-compress-preferences ZLIB BZIP2 ZIP Uncompressed default-preference-list SHA512 SHA384 SHA256 AES256 AES192 AES ZLIB BZIP2 ZIP Uncompressed cert-digest-algo SHA512 s2k-digest-algo SHA512 s2k-cipher-algo AES256 charset utf-8 fixed-list-mode no-comments no-emit-version [...]