370 reputation
110
bio website init.se
location Stockholm, Sweden
age 43
visits member for 2 years, 7 months
seen 6 mins ago

I'm a unix sysadmin, working as a consultant at Init AB (www.init.se). My main focus is unix security and PKI; I work a lot with the open-source CA system EJBCA.

Previous jobs include sysadmin in charge of security related systems at a large bank, and mail servers at a largish ISP, including handling abuse and spam issues.

Email address: jenny@init.se


May
22
comment Creating my own CA for an intranet
@André as regards EJBCA, it can be used from the command line too, so you won't have to expose the web interface. But it's an enterprise-level thing and probably overkill for your purposes (and I say this as someone who makes a living working with it).
May
21
comment How can I stop an IP from trying to use my mail server?
@sebix That question also contains answers on how to stop spam from reaching the server, e.g. by using blocklists. I agree that this question is more of a fit for Serverfault, but once it gets there it's likely to be closed as a duplicate.
May
20
comment How can I stop an IP from trying to use my mail server?
Have a look at serverfault.com/questions/419407/…
Apr
12
revised Client Certificates
changed domain name to example.com as that is the recommended usage.
Apr
12
suggested approved edit on Client Certificates
Mar
24
revised Easy explanation of SSL client certificates for a developer
added clarification
Mar
24
revised Easy explanation of SSL client certificates for a developer
added 9 characters in body
Mar
24
answered Easy explanation of SSL client certificates for a developer
Mar
23
comment How to transform an hash into a usable password?
A number of years ago, the place where I worked had a similar app to set and get passwords for the servers. The app combined a random string (which was the same for all servers, and changed regularly) with the server's hostname and the username of the account to which the password applied. It was secure enough for our purposes, which is not to say that it would be secure enough for everyone.
Mar
23
revised How to deal with SSH keys in insecure environment
deleted 6 characters in body
Mar
20
revised How to deal with SSH keys in insecure environment
deleted 1 character in body
Mar
20
answered How to deal with SSH keys in insecure environment
Jan
5
awarded  Commentator
Jan
5
comment how does a site know it is me even after changing ip address and clearing cookie?
Do you get the same issue if you're using your smartphone as a tether to the cellular network?
Jan
5
comment how does a site know it is me even after changing ip address and clearing cookie?
If it blocks the OP even when they're connecting through TOR, it's unlikely to be the ISP's IP range that's the issue. Of course, they may be blocking known TOR exit nodes as well.
Dec
29
revised Import certificate into Windows key store
Formatting, some grammar, removed "thanks"
Dec
29
suggested approved edit on Import certificate into Windows key store
Dec
26
comment Can I “hide” the private key, while still allowing it to be used?
I also thought of another way of keeping the authorized_keys file safe, see the edit. (And yeah, this is one question that overlaps between Information Security and Server Fault - I don't think this is the wrong place but maybe there are two right ones.)
Dec
26
revised Can I “hide” the private key, while still allowing it to be used?
added another way to limit editing of the authorized_keys file
Dec
26
comment Can I “hide” the private key, while still allowing it to be used?
The list is in the man page for sshd, under the heading Authorized Keys Format