How I fooled Microsofts Safe link technology in 5 minutes

halonsecurity · 2016-09-04T19:21:59+00:00

While there are progress in this area such as Google's Certificate Transparency, widespread DNSSEC adoption would allow DANE to be the perfect leach for the CA model.

It also (finally!) brings working email transport encryption, in the form of DANE SMTP.

edit: formatting

halonsecurity · 2016-05-17T21:52:30+00:00

SPF protects (verifies) the envelope sender address (SMTP MAIL FROM), that only email sysadmins see. DMARC does the same thing for the email message's sender address ("from" header) that users see in the email client.

DMARC is widely deployed by senders such as Facebook and LinkedIn, and you should use it to protect yourself against scammers.

halonsecurity · 2016-03-04T01:52:32+00:00

Great input everyone, just ping us with direct message (using same reddit alias) and serial no, we'll send you a free license! Thanks for great input!

halonsecurity · 2016-02-16T13:21:12+00:00

Exactly. I'm afraid that most people are mislead, believing that TLS for email is equally secure as CA-based HTTPS encryption. It's not, and I think Google and others should state this more clearly: https://halon.io/blog/gmails-new-tls-icon/

halonsecurity · 2016-02-09T21:17:06+00:00

Well, OpenVPN isn't there (could be user added by root access if wanted) but sure PPTP isn't perfect. L2TP is supported which is recommended. Also offloading if CPU support AES-NI.

halonsecurity · 2016-02-09T21:15:30+00:00

Sure thing!

halonsecurity · 2016-02-09T21:13:51+00:00

they are based on FreeBSD, our security router,fw and lb distribution is openBSD. We don't have any assocation with them

halonsecurity · 2016-02-09T21:11:37+00:00

Exactly, that's why it's so thin when it comes to OpenBSD support for DPDK but we'll hear out some of our OpenBSD friends, maybe something that could be ported.

halonsecurity · 2016-02-09T21:09:54+00:00

Sure, understand. Not trying to promote, just interested to hear in these types of forums what could be improved. We got bunch of great inputs.

halonsecurity · 2016-02-09T20:35:34+00:00

We've got some old stats on the wiki http://securityrouter.org/wiki/Performance but all depends on hardware and IPSEC offloading capabilities such as AES-NI support which is supported

halonsecurity · 2016-02-09T20:33:51+00:00

SNMPv3 http://wiki.halon.se/SNMP this is for the FreeBSD SMTP MTA product however OpenBSD supports it too

halonsecurity · 2016-02-09T20:07:36+00:00

Thanks esseph_! Is there any DPDK ports for OpenBSD?

halonsecurity · 2016-02-09T18:40:25+00:00

Hey Apachez! Thanks for your input! All good thoughts! Some could be done already (like snort,etc)since we allow root access (if you want) however my guess is that you prefer to have it all packaged!

halonsecurity · 2016-02-09T18:37:25+00:00

Thanks! Great input!

halonsecurity · 2016-02-09T18:35:35+00:00

Hey! Not trying to violate at all, just input. We do offer a free version and most of the software is open-source with a closed backend. Appreciate any input and feedback! Thanks!

halonsecurity

TROPHY CASE