6,289 reputation
934
bio website linkedin.com/in/…
location Boston, MA
age 37
visits member for 2 years, 4 months
seen yesterday
stats profile views 1,167

I manage a small security team in a very big quasi-govt agency. I take the utmost delight in being a nexus for security related topics and bringing a picture at various levels of detail to customers, peers and the team members who report to me. My depth of expertise is primarily from PKI and web service security as that has been the cornerstone of my work as a developer for large scale access control, authentication and key management solutions. My more recent work has focused on network protections, risk analysis and operational security, and it's been great to transition from teacher to learner here on IT Security.

When I'm not doing software stuff, I study medieval India, study dance, and work in the Burlesque scene.


1d
comment Why standards organizations give so short protection times for 128 bit encryption?
"128-bit cryptography is still around in 17 years, bravo." -- true for commercial, but I'd bet you money that there will be big organizational systems alive and well today that are still using the same legacy components in 2030 with software that is no longer supported but still running. :)
1d
revised What are the tradeoffs in cost, effort, and value in moving a database server to a virtualized DMZ environment?
deleted 96 characters in body; edited title
2d
reviewed Leave Open Considerations for information exchange agreement between governmental agencies
2d
reviewed Close how to determine what type of server behind a port
2d
answered Becoming a malware analyst?
May
20
revised How to secure application VM?
deleted 1 characters in body
May
20
comment Change 'Key Usage' of a certificate
Data Encipherment means that the key pair is approved (by the CA vendor) to provide encryption. Whether you permit your server to provide encryption (such as HTTPS) is a matter of how you've configured your server. Performance will be dictated by your system and you've configured it. I won't say it has nothing to do with the key pair or the cert - different key pairs, different settings in the certificate can change performance a bit - but not the data encipherment setting.
May
15
reviewed Leave Open Can you tell if your computer was hacked and pictures stolen from 2-6 months ago?
May
15
reviewed Close Hack a LAN with low security
May
15
answered Data needed for why not to load third party JavaScript on web page with credit card form
May
15
revised How do you verify a certificate belongs to a domain?
Added a step for completeness.
May
15
comment Certificate authentication with jQuery's ajax() function
Some clarification here would be helpful. Syncing vs. authentication - why is the cert needed, what are you trying to accomplish? Generally, when authentication is the goal, you also need a proof of private key, so just checking that the certificate is valid won't be sufficient.
May
15
reviewed Close Securing my firewall (both dedicated and iptables-based)
May
15
reviewed Leave Open Virus with PGP Encryption Preventing Virus Scan
May
15
reviewed Leave Open What are some signs that a certain degree in information security will be a quality one?
May
15
reviewed Leave Open Database connection from front end
May
14
answered How do you verify a certificate belongs to a domain?
May
14
answered Database connection from front end
May
14
awarded  Nice Answer
May
13
answered What are some signs that a certain degree in information security will be a quality one?