118 reputation
16
bio website
location Oakland, CA
age
visits member for 2 years, 1 month
seen Mar 17 at 22:48

May
12
awarded  Notable Question
Nov
12
awarded  Popular Question
Apr
6
answered rancid like tool for config files
Apr
5
awarded  Scholar
Apr
5
accepted SSL Cert Types and Key Usage
Apr
5
comment SSL Cert Types and Key Usage
Thanks much for the explanation and links; they helped me gain further understanding. I was afraid of that disconnect between requested and signed extensions. Hopefully I won't need to argue with my CA to add or alter cert templates.
Apr
5
asked SSL Cert Types and Key Usage
Jan
29
answered Backup server categorization in the Open PCI Scoping Toolkit
Jan
29
comment Mutual authentication for humans
As for password as public key, I was thinking along the lines of SSL certs, using public and private keys. The public key can be shared and distributed, used to validate against a private key. I'm pretty much making a comparison of the discussed methods of challenge-response to shared secrets, such as SSH, to a method which offloads or outsources the validation (per your constraints on technology) to a third party. A synchronized set of random value generators (a la RSA SecurID) seemed too obvious a cheat around the software rule.
Jan
29
comment Mutual authentication for humans
I was thinking along the lines of talking to your credit card company for instance. If they call you, you don't trust them, so you call them to verify. This aside, you could set up a similar, or different authentication with the trusted third party.
Jan
29
awarded  Teacher
Jan
29
comment Best practice advice - folder security (windows environment)
You're welcome. Remember though, it's not your data, so better to discuss and balance the needs of the owner with the policy and responsibility (and possibly the legal requirements) of your role.
Jan
29
answered Best practice advice - folder security (windows environment)
Jan
29
answered Verifying users location & authenticity
Jan
29
awarded  Editor
Jan
29
revised Mutual authentication for humans
added 828 characters in body
Jan
29
answered where to store a key for encryption
Jan
29
answered Mutual authentication for humans
Sep
9
awarded  Supporter
Sep
9
comment Should your client SSL Trusted Authority contain only root and intermediate certificates?
Thanks, DW. Nice to know I'm not crazy.