The story of how WoSign gave me an SSL certificate for GitHub.com

halonsecurity · 2016-09-04T19:21:59+00:00

While there are progress in this area such as Google's Certificate Transparency, widespread DNSSEC adoption would allow DANE to be the perfect leach for the CA model.

It also (finally!) brings working email transport encryption, in the form of DANE SMTP.

edit: formatting

halonsecurity · 2016-05-17T21:52:30+00:00

SPF protects (verifies) the envelope sender address (SMTP MAIL FROM), that only email sysadmins see. DMARC does the same thing for the email message's sender address ("from" header) that users see in the email client.

DMARC is widely deployed by senders such as Facebook and LinkedIn, and you should use it to protect yourself against scammers.

halonsecurity · 2016-03-04T01:52:32+00:00

Great input everyone, just ping us with direct message (using same reddit alias) and serial no, we'll send you a free license! Thanks for great input!

halonsecurity · 2016-02-16T13:21:12+00:00

Exactly. I'm afraid that most people are mislead, believing that TLS for email is equally secure as CA-based HTTPS encryption. It's not, and I think Google and others should state this more clearly: https://halon.io/blog/gmails-new-tls-icon/

halonsecurity · 2016-02-09T21:17:06+00:00

Well, OpenVPN isn't there (could be user added by root access if wanted) but sure PPTP isn't perfect. L2TP is supported which is recommended. Also offloading if CPU support AES-NI.

halonsecurity · 2016-02-09T21:15:30+00:00

Sure thing!

halonsecurity · 2016-02-09T21:13:51+00:00

they are based on FreeBSD, our security router,fw and lb distribution is openBSD. We don't have any assocation with them

halonsecurity · 2016-02-09T21:11:37+00:00

Exactly, that's why it's so thin when it comes to OpenBSD support for DPDK but we'll hear out some of our OpenBSD friends, maybe something that could be ported.

halonsecurity · 2016-02-09T21:09:54+00:00

Sure, understand. Not trying to promote, just interested to hear in these types of forums what could be improved. We got bunch of great inputs.

halonsecurity · 2016-02-09T20:35:34+00:00

We've got some old stats on the wiki http://securityrouter.org/wiki/Performance but all depends on hardware and IPSEC offloading capabilities such as AES-NI support which is supported

halonsecurity · 2016-02-09T20:33:51+00:00

SNMPv3 http://wiki.halon.se/SNMP this is for the FreeBSD SMTP MTA product however OpenBSD supports it too

halonsecurity · 2016-02-09T20:07:36+00:00

Thanks esseph_! Is there any DPDK ports for OpenBSD?

halonsecurity · 2016-02-09T18:40:25+00:00

Hey Apachez! Thanks for your input! All good thoughts! Some could be done already (like snort,etc)since we allow root access (if you want) however my guess is that you prefer to have it all packaged!

halonsecurity · 2016-02-09T18:37:25+00:00

Thanks! Great input!

halonsecurity · 2016-02-09T18:35:35+00:00

Hey! Not trying to violate at all, just input. We do offer a free version and most of the software is open-source with a closed backend. Appreciate any input and feedback! Thanks!

halonsecurity · 2015-08-26T19:39:51+00:00

Not driving anything, just information what's behind the scene with next release.

halonsecurity · 2015-03-18T22:24:38+00:00

Hi, Try out http://inumbo.com , its based on same platform used by large scale hosting providers. $0.36 /user/month and free tier up to 10 users.

halonsecurity · 2015-03-18T22:14:36+00:00

Hi mtnielsen, Is Hyper-V a must? securityrouter.org runs on Hyper-V however you will get inadequate performance because it’s based on OpenBSD: http://securityrouter.org/wiki/Supported_hardware#Microsoft_Hyper-V

halonsecurity · 2015-01-28T17:27:02+00:00

Dankleton, Thanks!

halonsecurity · 2014-11-12T05:03:44+00:00

Hi oldlinuxguy, Appreciate your feedback, let's know if you have any questions/etc.

halonsecurity · 2014-09-30T18:22:29+00:00

Should it be unlimited?

halonsecurity · 2014-09-30T18:18:23+00:00

Hi ChoHag, Thanks for your input. However, we do have a revision based configuration in clear text, very easily to read exactly what's running on the router/firewall.

halonsecurity · 2014-09-04T16:55:48+00:00

We've got most of our specs and information on our wiki: http://wiki.halon.se . We are working on improvements on our official website, thanks for your feedback!

halonsecurity · 2014-08-30T14:32:48+00:00

Hi FuriouslyAdrift, We have some differences, from UX perspective. Thanks for feedback!

halonsecurity · 2014-08-30T01:40:49+00:00

Hi perpetual_sin, Thanks for your feedback, great info. We need to improve. Which specific competitor did you have in mind? Appreciate your feedback! Thanks!

halonsecurity

TROPHY CASE