297 reputation
1315
bio website google.com
location Stack Overflow
age 31
visits member for 2 years
seen Nov 7 at 18:02

I post stuff on stackoverflow and want a free profile badge for filling out this section :D


Oct
8
accepted using commonName for DNS vs subjAltName
Oct
7
asked using commonName for DNS vs subjAltName
Aug
27
awarded  Famous Question
Jul
2
awarded  Curious
Jun
12
accepted CSR's with null bytes in them
Jun
12
asked CSR's with null bytes in them
Jun
12
accepted Creating an X.509 certificate with an invalid signature
Jun
11
awarded  Custodian
Jun
11
reviewed Approve suggested edit on Creating an X.509 certificate with an invalid signature
Jun
11
asked Creating an X.509 certificate with an invalid signature
Apr
29
awarded  Commentator
Mar
1
asked is this optional keyword redundant?
Jan
31
awarded  Popular Question
Dec
5
comment Authenticate user without knowing their password
So I guess you'd be sending the native app an encrypted copy of the private key and have the native app use some sort of password-based key-derivation scheme to decrypt it? Because if you're storing unencrypted private keys on the server then I just don't see the point..
Nov
10
awarded  Yearling
Oct
29
comment Is phpseclib a secure and reliable alternative to OpenSSL?
For that matter, OpenSSL has FIPS certification, which, as I understand it, can cost upwards of $100,000 USD. For some reason I don't imagine the phpseclib community is big enough to pony up that kind of cash.
Oct
29
comment Is phpseclib a secure and reliable alternative to OpenSSL?
I think phpseclib is a great solution but Thomas and tyleri are right - it's going to be hard to dethrone OpenSSL, which has a ton more scrutiny due to it's much greater level of popularity. Also, FWIW, phpseclib does use OpenSSL, if it's available, for RSA and biginteger operations. That would seem to suggest that even the phpseclib author thinks OpenSSL is better in a lot of cases.
Oct
27
comment Is generating an RSA key with password and then stripping it off more secure than no password at all?
Could be one extra source of entropy, I suppose, for the CSPRNG, depending on how the CSPRNG is implemented, but beyond that, I think it's BS too. And even the "extra source of entropy" thing is a bit of a stretch.
Oct
12
awarded  Notable Question
Jun
20
awarded  Popular Question