Questions tagged [trust]

Trust is a measure of how much an entity relies on other entities for its security.

A principal in a system with trusts another principal if it allows its security to depend on assertions made by that other principal. For example, when a web browser assumes that a web site is legitimate because the site shows a certificate signed by a certificate authority, the browser trusts the CA. Trust is often established and propagated through cryptography. The concept is derived from the plain English meaning of the word, which is studied by social sciences.

If your question is about determining what security policy should apply or whether a system meets a desired security policy, and it doesn't involve code, consider asking on Security Stack Exchange.

205 questions
1
vote
1 answer

How can we tell a CFStream to use a set of anchor certificates?

I know we can use SecTrustSetAnchorCertificates() given a SecTrustRef. But with CFStreams, we can get the trust object only after the hand shake. One workaround seems to be to disable certificate chain verification on the CFStream using the…
Plumenator
  • 1,682
  • 3
  • 20
  • 49
1
vote
2 answers

VS2017 Debug C++ Project in ClearCase Dynamic View

When I open a VS solution hosted on a mapped ClearCase dynamic view, then try to debug one of the C++ projects within it, I am getting the following error: Unable to start program 'Y:\[path]\[program].exe' Operation not supported. Unknown error:…
Jeff G
  • 4,470
  • 2
  • 41
  • 76
1
vote
1 answer

Which cert files does Git for Windows use

In the default git install it has a lot of certificates. I'm still failing to setup SSL in GIT and I'm finding it difficult to work out what git is attempting to do to work with it's use of ssl. Does anyone knows what all these different cert files…
teknopaul
  • 6,505
  • 2
  • 30
  • 24
1
vote
2 answers

How to make a browser trust a self-signed certificate with a user-friendly prompt?

Here's the scenario: Website A is served from a public domain example.com via HTTPS. Website A needs to access a service B via WebSocket. Thus, the websocket also needs to be secure aka wss://. The service B is currently not secured. I'm trying to…
Vilx-
  • 104,512
  • 87
  • 279
  • 422
1
vote
1 answer

Android https - tls on a specific server

I developed an Android app that need to connect to a server for Rest request. I'm new in https and (despite last 2 days spent to looking for on the on web) I've not understood nothing. The server has a certificate made with COMODO(or geotrust) and…
frisk
  • 75
  • 1
  • 10
1
vote
0 answers

Weird SSL/TLS issue in Azure web app

I have 3 web apps in Azure. For illustration purposes let's just call them Service_A, Service_B, and Service_C. Service_A calls Service_B, which in turn calls Service_C. Service_A also calls Service_C. Service_A -> Service_C works fine. Service_B ->…
Joe Dyndale
  • 1,073
  • 1
  • 15
  • 32
1
vote
1 answer

Trust anchor not found on Android Nougat

so I understand the changes made to Android Nougat in regards to how user added CA certificates are being handled. I have an android application that opens an SSLSocket to a server instance running on some self installed server. That concept has…
Jens
  • 1,157
  • 1
  • 8
  • 17
1
vote
0 answers

SwiftHTTP Credentials and self signed Certificate

I am using SwiftHTTP and try to get a JSON Feed from my Server. The Server has a self signed Certificate and Access via User and Password. I tryed with Alamofire but I found no Solution here's my Code HTTP.globalRequest { req in …
Marc
  • 225
  • 1
  • 9
1
vote
1 answer

With CORS, why do servers declare which clients may trust it, instead of clients declaring what servers they trust?

There is something about Cross Origin Resource Sharing (CORS) that I have never truly understood, namely that with a cross-origin HTTP request, it is not the client that gets to decide which server(s) it wants to trust; instead, the server declares…
stakx - no longer contributing
  • 83,039
  • 20
  • 168
  • 268
1
vote
2 answers

Make Trusted MSI Setup Project in Visual Studio?

I have both VS2008 and VS2010 Setup projects that create .MSI files. On server 2008, I get warnings that the apps are not "trusted". How can I bake-in trust for the apps I build with Visual Studio? Thanks.
Snowy
  • 5,942
  • 19
  • 65
  • 119
1
vote
1 answer

.NET trust level question

Is it possible to make a change to a project that will cause it's assembly to be executed in a different trust level? If so what is it? From what I understand this can only be determined form outside of the project itself...
Abe Miessler
  • 82,532
  • 99
  • 305
  • 486
1
vote
1 answer

How do I allow databases to run activex content when opened with VBA?

In Access 2013 (64-bit) I'm opening another database (db2) when the user clicks a button on a form in db1. This is working. However, when it opens db2 I get the warning bar "Security warning: Some active content has been disabled. Click for more…
user3791372
  • 4,445
  • 6
  • 44
  • 78
1
vote
2 answers

Write files to App_Data under medium trust hack?

Is there any way to Write files to App_Data under medium trust hack? Im sure I've heard about some hack, is that true?
MartinHN
  • 19,542
  • 19
  • 89
  • 131
1
vote
3 answers

Deploy a full trust wpf browser application (XBAP)

I am building a XBAP application which required to run in a full trust environment. Thus, when using it on browser, the end-user have to install my .pfx file (to certificate my application) or receives the famous "Trust not granted" error. That make…
hanuman0503
  • 219
  • 6
  • 19
1
vote
1 answer

Is it Ok to use the server cert as a client cert in a trust relationship?

I'm working on a system where multiple servers can have trust relationships with each other. These relationships are established with server-to-server connections using X.509 certificate authentication. Servers have their own server certificates…
John Calcote
  • 793
  • 1
  • 8
  • 15