Description

Certificates are the order of the day this month as Paul and Graham look at upgrading web servers to HTTPS, the pros and cons of digitally signed e-mail and how with great power comes great responsibility -- particularly if that power is over people's passwords.

• UIS Service Desk: service-desk@uis.cam.ac.uk
• UIS Cyber Security pages: http://www.uis.cam.ac.uk/cybersecurity
• E-mail CERT: cert@cam.ac.uk
• Telegraph story about EU and GDPR: https://www.telegraph.co.uk/technology/2018/05/30/embarrassing-leak-shows-eu-falls-short-data-law/
• 2FA on eBay: https://nakedsecurity.sophos.com/2018/05/31/how-to-set-up-2fa-on-ebay-go-do-it-now/
• 2FA on Firefox: https://www.zdnet.com/article/firefox-accounts-gets-2fa-security-you-can-use-google-authenticator-one-time-codes/
• Chrome to show HTTP as not secure: https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html
• QuoVadis certificates from UIS: https://help.uis.cam.ac.uk/service/website-resources/website-components/tls-certs
• Let"s Encrypt: https://letsencrypt.org/
• Certbot: https://certbot.eff.org/
• Upgrading connections (Apache): https://httpd.apache.org/docs/2.4/rewrite/avoid.html (first example)
• Upgrading connections (nginx): https://bjornjohansen.no/redirect-to-https-with-nginx
• GPG: https://gnupg.org/
• Why Johnny can"t encrypt: https://www.usenix.org/legacy/events/sec99/full_papers/whitten/whitten_html/index.html
• Why Johnny STILL can"t encrypt: https://www.rsaconference.com/videos/why-johnny-still-cant-encrypt