01/2016 – aixzellent recommends the DNSSEC/TLSA Validator for additional data security
The open source project “DNSSEC/TLSA Validator” comprises a web browser add-on allowing you to check the existence and validity of DNSSEC– (Domain Name System Security Extensions) and TLSA (Transport Layer Security Association) records linked to domain names. Thereby, the DNSSEC Validator indicates whether the domain name is signed with DNSSEC. In addition to that, it checks whether the web browser connects to the correct IP-address which is related to this domain name. If a valid, DNSSEC-signed domain is found, the plug-in checks the existence of TLSA records. These TLSA records store hashes of remote server TLS/SSL certificates. The validity of the TLS/SSL certificate for the domain name will then be checked and validated by the DANE (DNS-based Authentication of Named Entities) protocol. At the moment, Mozilla Firefox (MF), Internet Explorer (IE), Apple Safari (AS), Google Chrome/Chromium (GC) und Opera (OP) are supported. The results of the verification are displayed by different icons. Additional informative texts are shown in the address bar of the website (MF, GC and OP), in a separate tool bar (IE) or toolbar buttons (AS). Detailed information will be accessible by clicking the coloured symbols. Thereby, the functioning of the DNSSEC/TLSA Validator is not dependent on any other external validating resolver. The core of both Validators is based on libunbound. In addition to that, the TLSA Validator is able to interrupt HTTPS-requests when the server’s certificate does not correspond to the obtained TLSA record. All major operating systems (MS Windows, Linux, Mac OS X, BSD, …) with 32-bit and 64-bit architectures are supported. The download is accessible free of charge. As company for security- and communication technology, aixzellent supports open source solutions and is always striving to offer the highest possible data security for customers. Therefore, every package with our solutions comprises a valid certificate by default! We are happy to advise you and answer your questions anytime. Please feel free to contact us at support@aixzellent.de or sales@aixzellent.de.
Tag-Filter
29.03.2016 - Verschlüsseln bietet weiterhin Schutz! [more...]
29.03.2016 - Mehr Sicherheit für Ihre Internet-Systeme [more...]
29.03.2016 - Optimaler Betrieb auf dedizierten Systemen [more...]
29.03.2016 - Safe communication with mail servers [more...]
29.03.2016 - Telekom, GMX & Co. will encrypt in future [more...]
29.03.2016 - Heartbleed-GAU with disastrousd consequences [more...]
29.03.2016 - The end of Truecrypt - what a shame [more...]
29.03.2016 - Microsoft has to grant access to users' data in Europe [more...]
29.03.2016 - Plain text is to be removed from the internet [more...]
29.03.2016 - What is still safe (Truecrypt, SSL, ssh, ...) [more...]