Reputation
34,879
Next tag badge:
167/100 score
19/20 answers
Badges
15 105 143
Impact
~1.6m people reached

Mar
16
comment Tool for reading application data before it's encrypted
Other method to avoid the manual debugging was already suggested by the deleted answer that you didn't like (i.imgur.com/ZLsNWfW.png), which is absolutely correct and helps you with your issue. You simply add the MiTM tool certificate to your trusted certs and MiTM your own connection. One MiTM tool is roe.ch/SSLsplit. Here's an advice: Just before you tell others they don't understand your question, ask yourself if you even understand your own problem.
Mar
16
comment Tool for reading application data before it's encrypted
You're asking the wrong question. "Seeing the data before it's encrypted" means that you'll have to use a debugger and step-by-step watch the execution of your application until you find the point just before the data is sent to TLS-related logic - there's no magical tool for that and you'll have to do it manually with a debugger. Since you control all aspects of this communication, you're far better of using the server's private key to decrypt the whole handshake using Wireshark (Google "decrypt TLS wireshark").
Mar
16
reviewed Leave Open Tool for reading application data before it's encrypted
Mar
16
reviewed Approve OpenBSD vs. NetBSD security
Mar
15
reviewed Approve What is the difference between key exchange algorithm and the authentication algorithm in SSL?
Mar
15
comment Membership.GeneratePassword
@bdawg For a better alternative that you can control, have a look at CodesInChaos' answer here stackoverflow.com/a/19068116
Mar
15
comment Membership.GeneratePassword
@bdawg Note that while it's a very secure way to generate secure random strings, it's actually a very bad way to generate passwords. You have no control over the character set and you'll end up with passwords like this i.imgur.com/1usU3E8.png that are horrible to handle, give to users, write down, type. The only good time to use it is when you're generating passwords that go into your password manager.
Mar
15
comment Vulnerable OS's?
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. - From Review
Mar
15
reviewed Approve Is it secure to use Lastpass to save my passwords?
Mar
13
reviewed Reject Are limited length passwords a security risk?
Mar
13
answered Whynopadlock.com shows one insecure link on microsoft website. Does that mean that htts communication can be compromised?
Mar
12
comment Relative merits and risks of encryption and OS security
Nice question, agent Kirkpatrick.
Mar
12
reviewed Leave Open Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents?
Mar
12
reviewed Edit Are password complexity rules counterproductive?
Mar
12
revised Are password complexity rules counterproductive?
added 6 characters in body
Mar
11
awarded  Famous Question
Mar
11
reviewed Approve Trying to build an open authentication controled authorization website for multiple domain users
Mar
11
reviewed Approve Does using the same mail and web server increase a risk of DDos due to IP exposure?
Mar
11
reviewed Leave Open Will quantum computers render AES obsolete?
Mar
11
reviewed Close How does Windows 7 login work?