Reputation
10,538
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
2 17 61
Newest
 Announcer
Impact
~615k people reached

Jul
19
comment How can my employer be a man-in-the-middle when I connect to Gmail?
"certificate 028CA85E6765" Yeah I thought the same. Trouble is, Google uses dozens of certificates. Why they go through the trouble of having many certificates at the same time even if most of them are nowhere near expiring is a mystery to me, but they do. I think the best thing to do is compare fingerprints from the CA.
Jul
19
comment How can my employer be a man-in-the-middle when I connect to Gmail?
Exactly. So eventually the question is: who sold you your private laptop and why are you running a preinstalled Windows containing who knows what? Somewhere you have a root of trust :) (And talking about trust roots, did anyone mention CAs? :D)
Jul
19
revised Tor, PGP and Tor Entrance Nodes
Changed example from Martin/StackExchange to Message/alice.example.net to reflect the question
Jul
19
answered Tor, PGP and Tor Entrance Nodes
Jul
17
comment Better techniques than url parameter encryption
Something sounds very wrong when you say RBAC is not an option.
Jul
16
reviewed Reject Why does Firefox split HTTPS request?
Jul
8
reviewed Reject XSS with input in onclick attribute
Jul
2
awarded  Curious
Jul
1
reviewed Approve Why do ATMs accept any PIN?
Jun
30
reviewed Approve opportunistic-encryption tag wiki
Jun
30
reviewed Approve opportunistic-encryption tag wiki excerpt
Jun
28
reviewed Approve How widely deployed is TLS with cipher ECDHE?
Jun
25
awarded  Yearling
Jun
17
reviewed Approve Safe way to communicate IBAN connection
Jun
17
reviewed Approve format-string tag wiki excerpt
Jun
17
reviewed Approve buffer-overflow tag wiki
Jun
17
reviewed Approve format-string tag wiki
Jun
13
comment Is there any reason someone wouldn't use a longer key?
That text sounds pretty good to include in your answer ;) Afraid I can't give you a second upvote though :(
Jun
13
comment Expiring AES Key
Well if you can modify the file, you can also delete it or change the key it's encrypted with. That would work of course. Other than that... well I guess I'll let others answer, but I'm not aware of any such technique.
Jun
13
comment Is there any reason someone wouldn't use a longer key?
+1 for being the only one to mention elliptic curves. What I've always wondered though: is ECC also faster than RSA when using a key with roughly the same strength (e.g. 2048-bits RSA and 224-bits ECC)?