Reputation
497
Top tag
Next privilege 500 Rep.
Access review queues
Badges
5 17
Impact
~14k people reached

Dec
23
awarded  Notable Question
Dec
17
comment How to replace SSL/TLS?
Are we talking about a web server that will serve web pages? Or a server for something else? (Maybe a Node.js server for a desktop game)
Oct
29
comment Why does IE11 refuse to enable back navigation caching for HTTPS?
"Normal caching": When you load a page (by for example typing an address in the address bar), the HTML is downloaded. If the HTML references resources that have already been downloaded and exist in the cache, it may not be downloaded again. This can be configured with headers like Cache-Control and Last-Modified. This works for both HTTP and HTTPS.
Oct
29
comment Why does IE11 refuse to enable back navigation caching for HTTPS?
There are two different types of cache: 1) the back navigation cache in IE11 which this question is about 2) normal caching which all browsers do. The article is about (1). The question is about (1). Normal caching (2) does happen in HTTPS.
Oct
29
comment Why does IE11 refuse to enable back navigation caching for HTTPS?
And yet, normal resource caching is enabled for HTTPS! Why is IE11 so concerned about physical access when it comes to back navigation caching, but not when it comes to normal caching?
Oct
28
revised Why does IE11 refuse to enable back navigation caching for HTTPS?
Fix title
Oct
28
awarded  Popular Question
Oct
1
comment How can CloudFlare provide a valid SSL certificate for domains not under its control?
I understand that you can't use your own certificate with the free plan. My question is why does the free plan even work: why do certificate authorities validate CloudFlare free certificates? I can't upvote your answer for this reason but thanks for participating :)
Sep
30
accepted How can CloudFlare provide a valid SSL certificate for domains not under its control?
Sep
30
asked How can CloudFlare provide a valid SSL certificate for domains not under its control?
Sep
18
comment Can I use 2 factor authentication for shared accounts?
That makes sense. 2FA is supposed to represent something you own. So if you want to share it, you have to share the physical phone or fob or whatever it is among several people at the office.
Aug
16
revised Why does IE11 refuse to enable back navigation caching for HTTPS?
Make it clear that I'm quoting official documentation and add back the quotation marks
Aug
14
asked Why does IE11 refuse to enable back navigation caching for HTTPS?
Jul
29
awarded  Yearling
Jul
14
awarded  Caucus
Jul
7
comment How does malicious software encrypt victims' files?
This is a bit off-topic but there's loads of software on Linux that looks at file extensions and does not look at file headers.
Jun
24
revised Why is the same origin policy so important?
Clarified again thanks to comments
Jun
24
suggested approved edit on Why is the same origin policy so important?
Jun
24
suggested rejected edit on Why is the same origin policy so important?
Jun
24
comment Why is the same origin policy so important?
Why didn't browser vendors choose this solution: if a.com makes a request to a resource from facebook.com, that request is made without any cookies, that way facebook.com will treat it as unauthenticated. Doesn't that close the vulnerability without banning cross-origin requests?