Reputation
30,000
Next tag badge:
93/100 score
19/20 answers
Badges
10 76 151
Newest
 Good Answer
Impact
~1.8m people reached

Sep
13
comment One website - two different SSL certificates: two different CA's
@KingJohnno I don't see why a CA won't issue multiple certificates for the same domain assuming the authenticity of the requester is verified.
Sep
13
answered One website - two different SSL certificates: two different CA's
Sep
13
comment Is there a HSTS equivalent for specifying TLS version?
@paj28 A HSTS-like thing for TLS versions and/or ciphersuites is completely irrelevant. The main point of HSTS is to stop MITM attacks that downgrade HTTPS connections to HTTP by decreeing to the client that all connections shall be HTTPS or fail (instead of silently falling back on HTTP). When it comes to TLS versions and cipher suites, the client does not have a say in the final choice at all.
Sep
12
revised Is there a HSTS equivalent for specifying TLS version?
edited tags
Sep
12
answered Is there a HSTS equivalent for specifying TLS version?
Sep
11
awarded  Announcer
Aug
22
awarded  Nice Answer
Aug
12
awarded  Popular Question
Aug
9
reviewed Reject Testing clean urls with sqlmap
Aug
6
awarded  Good Answer
Jul
31
comment Can an XOR cipher be broken if the plaintext is an incrementing number?
Your "key" is 32 bits. You don't need clever tricks when the key can be trivially bruteforced.
Jul
28
awarded  Notable Question
Jul
25
awarded  Constituent
Jul
22
awarded  Nice Answer
Jul
18
comment Are encryption algorithms designed to hinder parallelization?
"Also, is an encryption algorithm being less parallelizable often touted as an advantage of that algorithm?" No, because performance is a real concern with encryption algorithms.
Jul
14
reviewed Close Securing RFID membership cards
Jul
14
reviewed Close Trusted vulnerability database source
Jul
14
reviewed Leave Open Passing arrays to a function call (Bufer Overflow)
Jul
14
reviewed Close How can I detect subnets?
Jul
14
wiki