Does anybody know a good tutorial or book (or for using Indy and OpenSSL (1.0.2 in my case) correctly?
Does anybody know a good tutorial or book (or for using Indy and OpenSSL (1.0.2 in my case) correctly?
How should a secure implementation look like? How to prevent MITM? Which basic should I know?
Because of changing situation what is secure (like broken SHA-1 from google https://shattered.it/ ) it should not be too much outdated.
I only have a superficial knowledge, but already found some stuff on my own with using tools like https://testssl.sh/ and choosing ciphers from TR-02102-2 (german "technische Richtlinie" from BSI).
How should a secure implementation look like? How to prevent MITM? Which basic should I know?
Because of changing situation what is secure (like broken SHA-1 from google https://shattered.it/ ) it should not be too much outdated.
I only have a superficial knowledge, but already found some stuff on my own with using tools like https://testssl.sh/ and choosing ciphers from TR-02102-2 (german "technische Richtlinie" from BSI).
/sub
ReplyDeleteBest place to start would be to ask a specific question, right here:
ReplyDeletehttps://forums.embarcadero.com/forum.jspa?forumID=74
My problem is: I dont know the question.
ReplyDeleteMy TCP Connections via Indy and OpenSSL are working, but are they secure? Because of this I want a book, where everything (or a lot more than I know^^) is described and I would be able to see "ah, step 3 is missing in your code, didnt know that that step even exist".