markus-tharkun

150 reputation

bio	website	careers.stackoverflow.com/…
	location	Tallinn, Estonia
	age	36
visits	member for	11 months
	seen	Apr 14 at 16:09
stats	profile views	8

https://github.com/markushausammann/monitorix

	150 reputation	bio	website	careers.stackoverflow.com/…	visits	member for	11 months
17 badges		location	Tallinn, Estonia		seen	Apr 14 at 16:09

summary answers questions tags badges favorites bounties reputation activity

27 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 6	comment	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? Why did you wrap the cipher suite in quotes again, I think I knew and forgot? Is it necessary?
Oct 19	awarded	Commentator
Oct 19	comment	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? Thank you, that makes a few more things clear to me!
Oct 19	comment	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? I don't catch your drift... SSLRequireSSL would tell Apache to bounce http requests, is that what I want? I don't know, wouldn't rewriting everything to https be the same protection as bouncing http requests? My main question is, what is the best way of allowing https only?
Oct 19	accepted	Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Oct 19	comment	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? Ok, just read the Wikipedia article too, I guess this is the best way then and the rest of the risk has to be solved differently, like the correct CipherSuits against BEAST, etc.
Oct 19	comment	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? Oh hey bobince, you're here too, I know you from good answers on SO. Will this solution make a difference regarding the MITM problem, @sourcejedi mentioned?
Oct 19	revised	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? added 76 characters in body
Oct 19	revised	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? added 76 characters in body
Oct 19	comment	Is a forced rewrite from http to https secure? What does SSLRequireSSL add? And how can I disable the HTTP access?
Oct 18	asked	Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Oct 6	awarded	Notable Question
Aug 5	awarded	Popular Question
May 25	awarded	Scholar
May 25	accepted	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?
May 25	comment	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? If I only get the second line when verifying, would this mean that my system doesn't support your later addition?
May 25	comment	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? Great! That helps a lot, I'll try things out and repeat the scan and report back.
May 25	comment	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? And I think it could become canonical, since everybody who does a Nessus scan, and googles the ID or name of the plugin would find this answer.
May 25	comment	How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? That would indeed be very helpful!
May 25	awarded	Editor