8,827 reputation
11546
bio website linkedin.com/in/…
location Boston, MA
age 38
visits member for 3 years, 10 months
seen Jul 2 at 3:22

I manage a small security team in a very big quasi-govt agency. I take the utmost delight in being a nexus for security related topics and bringing a picture at various levels of detail to customers, peers and the team members who report to me. My depth of expertise is primarily from PKI and web service security as that has been the cornerstone of my work as a developer for large scale access control, authentication and key management solutions. My more recent work has focused on network protections, risk analysis and operational security, and it's been great to transition from teacher to learner here on IT Security.

When I'm not doing software stuff, I study medieval India, study dance, and work in the Burlesque scene.


Nov
10
awarded  Necromancer
Oct
31
awarded  Nice Answer
Oct
20
awarded  Nice Answer
Oct
19
awarded  Nice Answer
Oct
2
awarded  Good Answer
Sep
30
awarded  Explainer
Jul
3
awarded  certificates
Jun
6
awarded  Generalist
Jan
14
awarded  Yearling
Jan
6
comment How to check if wifi is safe while travelling?
Fair enough... although if I am sitting in Starbucks, see one and only one attwifi, and get the typical Starbucks clickthrough screens, I feel moderately comforted. Yes, the guy in the table next to me could be spoofing me... but if I have a reason to be that paranoid, I really shouldn't be using any public Wifi at all.
Jan
3
answered How to check if wifi is safe while travelling?
Dec
23
answered How would I give an encryption key to only one person?
Dec
23
answered Considerations for security release notes
Dec
20
answered For someone who has a key and ciphertext, is it possible to find out what encryption algorithm was used?
Dec
20
comment Can anonymizing techniques make you less anonymous?
Oh Thomas Pornin! You rock my world! This was great reading!
Dec
20
answered Trust a non-root CA in OpenSSL
Dec
19
awarded  Nice Answer
Dec
16
answered Can't brute force password cracking somehow be throttled?
Dec
16
comment Does an email signature increase security?
@atk - I totally agree that symmetric crypto doesn't provide data integrity, but if it can't be viewed in transit, it can't be tampered with in transit, which is why I wrote the post the way I did.
Dec
13
reviewed Close using asymmetric encryption to encrypt private key