| bio | website | linkedin.com/in/… |
|---|---|---|
| location | Boston, MA | |
| age | 37 | |
| visits | member for | 2 years, 4 months |
| seen | yesterday | |
| stats | profile views | 1,167 |
I manage a small security team in a very big quasi-govt agency. I take the utmost delight in being a nexus for security related topics and bringing a picture at various levels of detail to customers, peers and the team members who report to me. My depth of expertise is primarily from PKI and web service security as that has been the cornerstone of my work as a developer for large scale access control, authentication and key management solutions. My more recent work has focused on network protections, risk analysis and operational security, and it's been great to transition from teacher to learner here on IT Security.
When I'm not doing software stuff, I study medieval India, study dance, and work in the Burlesque scene.
|
1d |
comment |
Why standards organizations give so short protection times for 128 bit encryption? "128-bit cryptography is still around in 17 years, bravo." -- true for commercial, but I'd bet you money that there will be big organizational systems alive and well today that are still using the same legacy components in 2030 with software that is no longer supported but still running. :) |
|
1d |
revised |
What are the tradeoffs in cost, effort, and value in moving a database server to a virtualized DMZ environment? deleted 96 characters in body; edited title |
|
2d |
reviewed | Leave Open Considerations for information exchange agreement between governmental agencies |
|
2d |
reviewed | Close how to determine what type of server behind a port |
|
2d |
answered | Becoming a malware analyst? |
|
May 20 |
revised |
How to secure application VM? deleted 1 characters in body |
|
May 20 |
comment |
Change 'Key Usage' of a certificate Data Encipherment means that the key pair is approved (by the CA vendor) to provide encryption. Whether you permit your server to provide encryption (such as HTTPS) is a matter of how you've configured your server. Performance will be dictated by your system and you've configured it. I won't say it has nothing to do with the key pair or the cert - different key pairs, different settings in the certificate can change performance a bit - but not the data encipherment setting. |
|
May 15 |
reviewed | Leave Open Can you tell if your computer was hacked and pictures stolen from 2-6 months ago? |
|
May 15 |
reviewed | Close Hack a LAN with low security |
|
May 15 |
answered | Data needed for why not to load third party JavaScript on web page with credit card form |
|
May 15 |
revised |
How do you verify a certificate belongs to a domain? Added a step for completeness. |
|
May 15 |
comment |
Certificate authentication with jQuery's ajax() function Some clarification here would be helpful. Syncing vs. authentication - why is the cert needed, what are you trying to accomplish? Generally, when authentication is the goal, you also need a proof of private key, so just checking that the certificate is valid won't be sufficient. |
|
May 15 |
reviewed | Close Securing my firewall (both dedicated and iptables-based) |
|
May 15 |
reviewed | Leave Open Virus with PGP Encryption Preventing Virus Scan |
|
May 15 |
reviewed | Leave Open What are some signs that a certain degree in information security will be a quality one? |
|
May 15 |
reviewed | Leave Open Database connection from front end |
|
May 14 |
answered | How do you verify a certificate belongs to a domain? |
|
May 14 |
answered | Database connection from front end |
|
May 14 |
awarded | Nice Answer |
|
May 13 |
answered | What are some signs that a certain degree in information security will be a quality one? |