Reputation
964
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
7 17
Newest
 Excavator
Impact
~5k people reached

Apr
8
comment How does a Certificate Private Key get transferred on import / export?
@NeilSmithline There are cases where private key recovery is useful, e.g. when the key is used to encrypt emails or backups. In those cases, a lost key would render the data irrecoverable, so having it available from the CA would be useful. But apart from those cases, the CA shouldn't have or need to have the private key. (Key recovery is available in other CA platforms as well, e.g. EJBCA.)
Mar
23
comment Local certification authority and certificate chain
To get a certificate that can be used to sign anything and be trusted by everyone? No, not a matter of price,
Mar
17
comment Has my server been compromised? (Ransomware related)
Anybody can set any email address in the From:-line of an email. The address in itself is not grounds for worry.
Mar
12
comment Is it possible to get the pass phrase for private key file
@stochastic Here's one link, for the CA I usually work with: EJBCA key recovery. It's also mentioned in RFC 3647, which describes the standard template for CP and CPS for CAs.
Mar
6
comment Unable to completely enforce password policy
How are the passwords stored on those systems? Are they in e.g. shadow files, as in most Unixes, or stored in some other manner?
Mar
4
comment Why am I receiving HTTP GETs for a domain I don't own?
Anyone can connect to a web server and request any host at all. It's like asking why someone calls your phone number and asks for the wrong person.
Feb
14
comment How should I store a physical written copy of my password?
+1 for mentioning threat level. For most people, locking passwords in bank safes is far more effort than their passwords are worth.
Jan
25
comment Blocking Chinese IP addresses
A good search phrase is "geoip blocking" in whatever search engine you prefer. You may also want to look at "fail2ban".
Oct
14
comment Understanding the signing and verification process through a CA
Good answer. You might add tthat the server will usually need to present the intermediate certificates in order to provide a full chain back to a root certificate that is trusted by the client.
Aug
24
comment What certificates are needed for multi-level subdomains?
To answer your very last question - the browser will verify that the certificate matches the site you're on, and that it's issued by a trusted CA, and that it's valid at this point in time. Going from foo.com to bar.baz.foo.com won't trigger any warning, just as following a link from foo.com to bar.com won't. The browser does not care that there's a subdomain involved.
Jun
23
comment Work using net nanny
@JoelL Could be monitored - yes, absolutely. Is actively monitored - not necessarily.
Jun
23
comment Work using net nanny
And since you don't know, there's no way for anyone to answer your question. If you're using SSL, then it's less likely that someone would be able to see the contents of the page (though still not impossible, depending on their setup). Whether anyone actually does notice will depend on your company policy - which, again, nobody else can answer.
Jun
23
comment Work using net nanny
There's not enough information here to be able to give you any answer other than "maybe, but probably not".
Jun
23
comment Work using net nanny
Do you access your email using SSL or not?
May
29
comment SSH: Security of Pubkey Authentication vs Password
Yes - this question really belongs over at Information Security
May
22
comment Creating my own CA for an intranet
@André as regards EJBCA, it can be used from the command line too, so you won't have to expose the web interface. But it's an enterprise-level thing and probably overkill for your purposes (and I say this as someone who makes a living working with it).
May
21
comment How can I stop an IP from trying to use my mail server?
@sebix That question also contains answers on how to stop spam from reaching the server, e.g. by using blocklists. I agree that this question is more of a fit for Serverfault, but once it gets there it's likely to be closed as a duplicate.
May
20
comment How can I stop an IP from trying to use my mail server?
Have a look at serverfault.com/questions/419407/…
Mar
23
comment How to transform an hash into a usable password?
A number of years ago, the place where I worked had a similar app to set and get passwords for the servers. The app combined a random string (which was the same for all servers, and changed regularly) with the server's hostname and the username of the account to which the password applied. It was secure enough for our purposes, which is not to say that it would be secure enough for everyone.
Jan
5
comment how does a site know it is me even after changing ip address and clearing cookie?
Do you get the same issue if you're using your smartphone as a tether to the cellular network?