Application Security Testing: An Integral Part of DevOps
Microsoft Outlook.com and OneDrive have enabled PFS, or Perfect Forward Secrecy. This is a new encryption solution which provides a unique encryption key for each connection as it happens. This new technique is designed to be more challenging for attackers to decrypt the connections. PFS is not necessarily new to the web with Google leading the charge with PFS by enabling on Gmail, Docs, Google+ and other services. Microsoft is currently using PFS to protect the connections between their Outlook.com server and other email providers. In addition to PFS, Microsoft is also leveraging TLS, or Transport Layer Security for Outlook.com for all communications between their service and other e providers for both sending and receiving email. Continue reading here.