ldap security

LDAPS is not “an SSL” in the modern protocol sense. It is LDAP—Lightweight Directory Access Protocol—carried inside a secure TLS connection. The name LDAP over SSL and the shorthand LDAPS persist for historical and compatibility reasons, but a correctly maintained Windows environment should be...

A newly cataloged Windows LDAP weakness, tracked as CVE-2026-20812, directs attention back to the protocol at the center of Active Directory and modern Windows identity infrastructure: the Lightweight Directory Access Protocol (LDAP). Microsoft’s advisory states the core issue is improper input...