Categories
acme certificates web security web tools

Apple strong-arms entire CA industry into one-year certificate lifespans

 
Apple, Google, and Mozilla reduce the lifespan for HTTPS certificates to 398 days, against the wishes of Certificate Authorities.
Following Apple’s initial announcement, Mozilla and Google have stated similar intentions to implement the same rule in their browsers.
Starting with September 1, 2020, browsers and devices from Apple, Google, and Mozilla will show errors for new TLS certificates that have a lifespan greater than 398 days
https://www.zdnet.com/article/apple-strong-arms-entire-ca-industry-into-one-year-certificate-lifespans/
 
For IT Departments this means we need to invest into automation of the whole certificates process (CSR, install, renew, DH). No email work flows, no manual processes.
Usage of ACME with pre and post installation hooks, dns validation will become now finally mandatory
 
About upcoming limits on trusted certificates
In our ongoing efforts to improve web security for our users, Apple is reducing the maximum allowed lifetimes of TLS server certificates.
What’s changing
TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC must not have a validity period greater than 398 days.
This change will affect only TLS server certificates issued from the Root CAs preinstalled with iOS, iPadOS, macOS, watchOS, and tvOS. Additionally, this change will affect only TLS server certificates issued on or after September 1, 2020; any certificates issued prior to that date will not be affected by this change.
Connections to TLS servers violating these new requirements will fail. This might cause network and app failures and prevent websites from loading.
Categories
IPV6 web tools

Networking with IPv6 Only annoyances

Currently i see a big sites reachable by DualStack but there are still some (for me)  websites that i thought they should be already support IPv6

download.mozilla.org

for  Downloading Firefox is using Amazon infrastructure

Name:    bouncer-bouncer-elb.prod.mozaws.net
Address:  52.86.71.202
Aliases:  download.mozilla.org

Location Ashburn,Virginia,United States,North America
ISP: Amazon Technologies

To see progress goto https://bugzilla.mozilla.org/show_bug.cgi?id=1244282

Ubuntu

https://launchpad.net Addresses:  91.189.89.222, 91.189.89.225 Canonical Ltd

https://answers.launchpad.net/launchpad Addresses:  91.189.89.224, 91.189.89.225

https://wiki.ubuntu.com/ 91.189.89.153

All Ipv6 only no reachable

IPv6 Support in Microsoft Products and Services

https://technet.microsoft.com/en-us/network/hh994905.aspx

Android

IT pros blast Google over Android’s refusal to play nice with IPv6

DHCPv6 is an outgrowth of the DHCP protocol used in the older IPv4 standard – it’s an acronym for “dynamic host configuration protocol,” and is a key building block of network management. Nevertheless, Google’s wildly popular Android devices – which accounted for 78% of all smartphones shipped worldwide in the first quarter of this year – don’t support DHCPv6 for address assignment.

Why the lack of DHCPv6 support is a problem

http://www.techrepublic.com/article/androids-lack-of-dhcpv6-support-poses-security-and-ipv6-deployment-issues/

Current Status of IPv6 Support for Networking Applications

see http://www a9tc97v.deepspace6.net/docs/ipv6_status_page_apps.html ( LINUX/BSD)

Apple Will Require IPv6 Support For All iOS 9 Apps ( but still pending , my comment?)

http://www.internetsociety.org/deploy360/blog/2015/06/apple-will-require-ipv6-support-for-all-ios-9-apps/

 

 

Categories
DFS Sharepoint web tools

SHAREPOINT WAN OPTIMIZATION AND WAFS A COMPARISON OF FILE COLLABORATION TECHNOLOGIES

http://www.peersoftware.com/news/white_papers/SharePointVsWanOptimizationVsWAFS.pdf

http://www.peersoftware.com/news/whitepapers.aspx

http://www.peersoftware.com/news/white_papers/TTCollaborateOutsideYourFourWalls.pdf

http://www.peersoftware.com/news/white_papers/TTAvoidingComplexityofSharePoint.pdf

http://www.peersoftware.com/solutions/high_availability/business-file-sharing-collaboration.aspx

http://www.kiekert.com/de/unternehmen/kontakt.html

Categories
web tools

Short URL with j.mp

http://j.mp/eoDRcw a short link to this blog.

Link stats see http://j.mp/eoDRcw+