Reputation
30,750
Next tag badge:
96/100 score
19/20 answers
Badges
10 79 152
Newest
 Guru
Impact
~2.0m people reached

Oct
20
awarded  Nice Answer
Oct
18
awarded  Nice Question
Sep
21
answered Challenge: How to find the secret key in homebrew MAC/keyed hash: sha1(key + cookie)?
Sep
20
answered AES encryption between Java and Ruby: what is the default mode and padding for AES in Java?
Sep
18
reviewed Reject Isolate two hard drives with two operating systems
Sep
17
answered JAVA (Web Application) Public Data Assigned to Private Array-Typed Field
Sep
13
comment One website - two different SSL certificates: two different CA's
@KingJohnno I don't see why a CA won't issue multiple certificates for the same domain assuming the authenticity of the requester is verified.
Sep
13
answered One website - two different SSL certificates: two different CA's
Sep
13
comment Is there a HSTS equivalent for specifying TLS version?
@paj28 A HSTS-like thing for TLS versions and/or ciphersuites is completely irrelevant. The main point of HSTS is to stop MITM attacks that downgrade HTTPS connections to HTTP by decreeing to the client that all connections shall be HTTPS or fail (instead of silently falling back on HTTP). When it comes to TLS versions and cipher suites, the client does not have a say in the final choice at all.
Sep
12
revised Is there a HSTS equivalent for specifying TLS version?
edited tags
Sep
12
answered Is there a HSTS equivalent for specifying TLS version?
Sep
11
awarded  Announcer
Aug
22
awarded  Nice Answer
Aug
12
awarded  Popular Question
Aug
9
reviewed Reject Testing clean urls with sqlmap
Aug
6
awarded  Good Answer
Jul
31
comment Can an XOR cipher be broken if the plaintext is an incrementing number?
Your "key" is 32 bits. You don't need clever tricks when the key can be trivially bruteforced.
Jul
28
awarded  Notable Question
Jul
25
awarded  Constituent
Jul
22
awarded  Nice Answer