TLS State of the Union
0 likes411 views
This document summarizes the state of TLS and SSL security. It discusses how the Heartbleed vulnerability exposed vulnerabilities in over 60% of websites. It also discusses increased efforts to improve TLS security like the Linux Foundation providing funding to OpenSSL and the rise of free certificate authorities like Let's Encrypt. The document advocates for best practices like enabling forward secrecy, moving to TLS 1.3, and avoiding SHA-1 certificates.
TLS State of the Union
- 1. www.thales-esecurity.com OPEN TLS State of the Union ApacheCon NA 2016 Sander Temme – sctemme@apache.org
- 2. 2 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN
- 3. 3 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Heartbleed Impact: >60% of sites vulnerable!
- 4. 4 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN How Many Eyeballs Are There? Really?
- 5. 5 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN The Linux Foundation Steps In
- 6. 6 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN The Linux Foundation Steps In
- 7. 7 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Core Infrastructure Initiative Grant for OpenSSL Development
- 8. 8 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN So, What Else Happened…
- 9. 9 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN So, What Else Happened…
- 11. 11 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Pervasive TLS Deployment ▌ High Traffic Sites now default to TLS Google, YouTube, Yahoo!, Facebook, Twitter, Netflix (soon), … ▌ Increased consciousness ▌ Increased expertise Security Performance (https://istlsfastyet.com) ▌ Going Dark is the new default Google treats you better when you’re on TLS
- 12. 12 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Go Dark for Free: Let’s Encrypt! ▌ Free, Automated, and Open Certificate tool ▌ Supported by all the browsers ▌ It’s easy! Run software agent on server Must have root on host Creates SSL vhost for Apache httpd
- 13. 13 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN The Backdoor Debate
- 14. 14 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN The Backdoor Debate
- 15. 15 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN
- 16. 16 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Certificates Ain’t What They Used to Be
- 17. 17 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Certificates ▌ Don’t use self-signed It’s never been a good idea Now even less so ▌ PKI is Hard Don’t set up your own toy PKI Do it right or not at all ▌ Buy certs for Intranet sites From cheap commercial CAs Problem solved
- 19. 19 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN More Patches ▌ Increased OpenSSL Development ▌ Increased Adoption ▌ Increased Scrutiny ▌ Which OpenSSL version? The one that came with your OS yum update etc. ▌ OpenSSL release streams 0.9.x is dead, don’t use it 1.0.1t released May 3, 2016 1.0.2h released May 3, 2016 1.1.x is in pre-release Expect more patches, faster
- 20. 20 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Recommended Key Sizes ▌ Currently (May 2016) RSA: 2048bit ECC: 256bit ▌ Hashes: SHA-256 Chrome: certificates with SHA-1 in chain insecure Root certificates with SHA-1 ok https://security.googleblog.com/2014/09/gradually-sunsetting-sha-1.html http://dx.doi.org/10.6028/NIST.SP.800-57pt1r4
- 21. 21 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Transport Layer Security 1.3 ▌ Currently in development https://tlswg.github.io/tls13-spec/ ▌ Faster ▌ More secure
- 22. 22 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Server www.example.com TLS Static Key Handshake Root CA Certificate Server Certificate Client Here’s a Secret Scooby Snack Hello! Hello, it’s me! Verify Server Identity Derive Session Keys EncryptedCommunications NOM NOM decrypt NOM
- 23. 23 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Server www.example.com Handshake with Forward Secrecy Root CA Certificate Server Certificate Client Hello! Hello, it’s me! Verify Server Identity Derive Session Keys EncryptedCommunications
- 24. 24 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Content Inspection Interwebs Inspection/WAF Origin Server(s) Switch Origin Server(s) httpd WAF httpd httpd Inspection/WAF TLS TLS Re-encrypt Port spanning TLS
- 25. 25 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Content Inspection in a Forward Secrecy World Interwebs Application Delivery Controller Origin Server(s)httpd Inspection/WAF plaintext TLS Re-encrypt
- 26. 26 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN
- 27. 27 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Strong and Getting Stronger ▌ Deeper understanding of the risks ▌ Improved development Attention Funding ▌ Pervasive adoption
- 28. 28 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN What Can You Do? ▌ Use the tools well Don’t make smiley faces ▌ Inform yourself Much information on the googlewebs ▌ Don’t be a certificate problem Get rid of SHA-1 based certs Browser vendors don’t like to show errors to your users but they will ▌ Deploy patchable infrastructure Better software is just down the road
- 29. 29 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Further Reading ▌ TLS 1.3 RFC in development https://tlswg.github.io/tls13-spec/ ▌ Blogs, Talks, Presentations https://istlsfastyet.com/ https://blog.twitter.com/2013/forward-secrecy-at-twitter-0 https://blogs.windows.com/msedgedev/2015/11/04/sha-1-deprecation-update/ https://t.co/83UYUE7XZP (Chrome browser SSL related warnings) http://arstechnica.com/security/2015/04/it-wasnt-easy-but-netflix-will-soon-use- https-to-secure-video-streams/ https://security.googleblog.com/2014/08/https-as-ranking-signal_6.html
- 30. 30 This document may not be reproduced, modified , adapted, published, translated, in any way , in whole or in part or disclosed to a third party without prior written consent of Thales - Thales © 2016 All rights reserved. OPEN Questions and Discussion ▌ http://www.slideshare.net/sctemme ▌ sctemme@apache.org ▌ Follow @keysinthecloud on Twitter