Core Infrastructure and Security Blog
Copied!
Home
Options
520
Mike Kammer on 12-10-2019 06:21 AM
2,853
Paul Bergson on 12-04-2019 02:12 PM
3,073
wallenc on 11-26-2019 01:08 PM
1,858
Zoheb Shaikh on 11-19-2019 06:22 AM
1,445
Stanislav Belov on 11-12-2019 11:00 PM
2,366
SteveMat on 11-11-2019 02:27 PM
11.5K
Alan La Pietra on 11-04-2019 06:26 AM
470
Sean Leonard on 11-01-2019 03:23 PM
504
Joe_Zinn on 11-01-2019 03:22 PM
598
Joe_Zinn on 11-01-2019 03:22 PM
511
Joe_Zinn on 11-01-2019 03:22 PM
410
Sean Leonard on 11-01-2019 03:21 PM
402
Joe_Zinn on 11-01-2019 03:21 PM
380
Joe_Zinn on 11-01-2019 03:21 PM
402
Joe_Zinn on 11-01-2019 03:20 PM
405
Joe_Zinn on 11-01-2019 03:20 PM
595
Joe_Zinn on 11-01-2019 03:20 PM
814
Joe_Zinn on 11-01-2019 03:20 PM
1,482
Joe_Zinn on 11-01-2019 03:20 PM
1,940
Joe_Zinn on 11-01-2019 03:20 PM
396
AMARSIGLIA on 11-01-2019 03:20 PM
413
Joe_Zinn on 11-01-2019 03:20 PM
381
ktackett on 11-01-2019 03:17 PM
361
AMARSIGLIA on 11-01-2019 03:12 PM
371
ktackett on 11-01-2019 03:12 PM
378
AMARSIGLIA on 11-01-2019 03:09 PM
355
ktackett on 11-01-2019 03:08 PM
369
ktackett on 11-01-2019 03:08 PM
367
ktackett on 11-01-2019 03:07 PM
423
ktackett on 11-01-2019 03:05 PM
Latest Comments
@Justin_Shi Hi Justin, you can go with only one but to cover all security concerns related to this issue we recommend to change both. Also because the update will update both. Channel Binding Token info (was FAQ): https://internal.support.services.microsoft.com/en-us/help/2022970 Channel Binding for...
0 Likes
Hi @Alan La Pietra, One question here, according to the 2 documents here:LDAP channel bindingLDAP signingCan I just follow one doc to make my communications between LDAP clients and Active Directory domain controllers more secure? Or I must configure both the 2 to get this advantages. What's the dif...
0 Likes
If there is a requirement to secure the binding with a certificate, either internal CA or third party CA, and the domain ends in .local, is it possible to obtain a certificate from a third party CA for a upn suffix that is available externally and use this instead to bind securely? Deploying an inte...
0 Likes
For those with Macs, it looks like they do not support CBT (Channel Binding Tokens) so it won't be possible to set LdapEnforceChannelBinding to 2, but it does work with it set to 1 (Compatibility Mode). I'm guessing most people will have to stay in that mode anyway, due to an assortment of 3rd party...
2 Likes
Thank you, fascinating read and very informative! I do hope to build up my Windows troubleshooting skills higher and higher. Whenever I have to reinstall Windows to get an update applied I feel defeated :) Is there a good source to learn about Windows Update internals and troubleshooting things arou...
0 Likes