Reputation
304
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 7
Newest
 Caucus
Impact
~3k people reached

  • 0 posts edited
  • 1 helpful flag
  • 12 votes cast
May
15
comment encryption vs access control comparison
These are two very distinct concepts and I think you're mixing something up. Encryption uses mathematics to render data unusable without a key. That data could still be moved, copied or deleted. ACLs however assume you don't have physical access to a storage device (when you talk about restricting access to files) and just allow/deny access on a software level.
May
15
comment Creating my own CA for an intranet
Here's something to have a look at: github.com/cloudflare/cfssl
Nov
18
comment OpenSSL create both keys at once
Why not use &&?
Jul
29
comment Why aren't application downloads routinely done over HTTPS?
@Luc sslstrip. For instance.
Jul
25
comment Why aren't application downloads routinely done over HTTPS?
Assuming you're MITM'd you can't trust any connection without TLS and a verified signature. That includes twitter.
Nov
13
comment Creating Secure PHP Sessions
I'd recommend you watch this talk from DEFCON 18 youtube.com/watch?v=YDW7kobM6Ik - The first part is about PHP sessions.