network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 8 months |
| seen | Nov 18 '12 at 7:18 | |
| stats | profile views | 1 |
|
Nov 18 |
accepted | How are root CAs for SSL distributed? |
|
Nov 18 |
comment |
How are root CAs for SSL distributed? It is, indeed, funny... turtles all the way down! |
|
Nov 18 |
asked | How are root CAs for SSL distributed? |
|
Sep 15 |
comment |
In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? @tdammers could it conceivably work in a mailinglist-sort of way? |
|
Sep 15 |
comment |
Should WPA2-AES be presumed insecure? (What is the “Hole196” vulnerability?) I thought that was pretty useful. |
|
Sep 14 |
accepted | Without SSL, what vantage point does one need to MITM non-SSL'd HTTP? |
|
Sep 14 |
comment |
Without SSL, what vantage point does one need to MITM non-SSL'd HTTP? Sorry, I guess I was looking for a little bit more detail. I asked a more thorough version on crypto.SE.C, but I'm now thinking that it may have been an actually less appropriate site for the Q. crypto.stackexchange.com/questions/3796/… If you have priveleges perhaps you'd like to migrate it over. |
|
Sep 14 |
comment |
Without SSL, what vantage point does one need to MITM non-SSL'd HTTP? So you have to be an authorized link in the chain of the networking infrastructure used for the targeted connection, then? You know about ex-parrot.com/pete/upside-down-ternet.html ? |
|
Sep 14 |
accepted | Should WPA2-AES be presumed insecure? (What is the “Hole196” vulnerability?) |
|
Sep 14 |
asked | Without SSL, what vantage point does one need to MITM non-SSL'd HTTP? |
|
Sep 14 |
asked | Should WPA2-AES be presumed insecure? (What is the “Hole196” vulnerability?) |
|
Sep 14 |
awarded | Commentator |
|
Sep 14 |
comment |
In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? I'd just like to double check -- a different K must be used for each message, correct? Thinking it through on my own, I'm almost so sure of this that I don't even want to waste your time with the question, but I would just like to make sure I understand what's going on correctly. |
|
Sep 14 |
awarded | Supporter |
|
Sep 14 |
accepted | In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? |
|
Sep 14 |
comment |
In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? Oooh, I especially like the second point. Has anyone ever heard of PGP being used for multi-party mailing lists? |
|
Sep 13 |
asked | In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? |
|
Sep 10 |
comment |
Why are CSRF tokens necessary? @Gumbo that's a great point. |
|
Sep 10 |
comment |
Why are CSRF tokens necessary? I think it's really fantastic how accessible information about security is becoming. Thanks! |
|
Sep 10 |
awarded | Scholar |
