159 reputation
118
bio website careers.stackoverflow.com/…
location Tallinn, Estonia
age 37
visits member for 2 years, 2 months
seen Apr 28 at 18:29

Mar
17
awarded  Famous Question
Feb
10
awarded  Critic
Oct
4
comment Is it possible to do SQL injection (HIGH Level) on Damn Vulnerable Web App?
The last part is very interesting. Could you expand on that string literal vs raw SQL context and how it changes things?
Apr
6
comment How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?
Why did you wrap the cipher suite in quotes again, I think I knew and forgot? Is it necessary?
Oct
19
awarded  Commentator
Oct
19
comment Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Thank you, that makes a few more things clear to me!
Oct
19
comment Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
I don't catch your drift... SSLRequireSSL would tell Apache to bounce http requests, is that what I want? I don't know, wouldn't rewriting everything to https be the same protection as bouncing http requests? My main question is, what is the best way of allowing https only?
Oct
19
accepted Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Oct
19
comment Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Ok, just read the Wikipedia article too, I guess this is the best way then and the rest of the risk has to be solved differently, like the correct CipherSuits against BEAST, etc.
Oct
19
comment Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Oh hey bobince, you're here too, I know you from good answers on SO. Will this solution make a difference regarding the MITM problem, @sourcejedi mentioned?
Oct
19
revised Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
added 76 characters in body
Oct
19
revised Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
added 76 characters in body
Oct
19
comment Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
And how can I disable the HTTP access?
Oct
18
asked Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Oct
6
awarded  Notable Question
Aug
5
awarded  Popular Question
May
25
awarded  Scholar
May
25
accepted How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?
May
25
comment How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?
If I only get the second line when verifying, would this mean that my system doesn't support your later addition?
May
25
comment How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?
Great! That helps a lot, I'll try things out and repeat the scan and report back.