Knowledge
Every topic comes in two versions: “Simply explained” for management and non-specialists, “For specialists” with technical detail, commands and sources.
- 1The external attack surfaceWhat anyone on the internet can find out about your domains, servers and services – and why you should know it first.
- 2How the grade is calculatedFrom A to F: how eam.ch weighs findings, why a single critical finding caps the grade and what “risk accepted” means.
- 3TLS and certificatesThe padlock in the browser: what the certificate vouches for, why it must match every name and why old encryption is a risk.
- 4E-mail securitySPF, DKIM and DMARC prevent fraudsters from sending e-mails in your name. STARTTLS and MTA-STS protect the transport.
- 5Security headersShort instructions from your web server to the browser – they protect visitors against clickjacking, injected scripts and unencrypted connections.
- 6DNS and DNSSECThe internet's phone book: how DNSSEC prevents forged answers, what CAA is for and why dangling records are dangerous.
- 7Known vulnerabilitiesWhen visible software has a known flaw: what CVE, CVSS, EPSS and the KEV list mean and how urgent an update is.
- 8Backports: when the version number misleadsWhy an “old” version on a Linux server can still be secure – and how to find out whether a reported flaw is really open on your system.
- 9Open services and admin panelsDatabases, remote maintenance, FTP and login pages on the internet: which doors may be open and which should be closed.
- 10Lookalike domainssimpels.ch instead of simples.ch: how fraudsters use similar domains for phishing and fake invoices, and what you can do about it.
- 11Reputation and blocklistsIf your domain or mail server is on a warning list, e-mails end up in spam and browsers warn visitors. Usually a compromised system is behind it.
In depth: protocols
Two foundations of the internet explained in detail – history, current use and future.