305 reputation
19
bio website cnst.su
location San Jose, CA
age
visits member for 1 year, 4 months
seen 2 days ago

Apr
2
comment Does http support encryption without https (like STARTTLS)?
@AndrewRussell, no, you cannot do the same -- if people encounter the https link (e.g. from another user), but their browser is not compatible (say, Android 2.2), then they get no web-site at all; also, if compatible users get the http link, then they get no encryption; how is that the same as with STARTTLS, which is entirely transparent to everyone? Yes, if you encrypt without verifying, then you can still be subject to some attacks, but, at the very least, they'd have to be active attacks, whereas if you don't encrypt at all, then you're also subject to passive attacks as well.
Apr
1
awarded  Commentator
Apr
1
comment Does http support encryption without https (like STARTTLS)?
Well, the issue is the efforts that you must go to in order to support https. With STARTTLS, you just run a couple of commands, generate some random certificate, and you're done -- a lot of stuff would be encrypted from thereon. With https, you also have to pay someone to verify your certificates, then also update said certificates every 1 or two years, and then at the end of the day, some people might still not be able to access your web-site at all [by following the links], because you run too many sites on a single IPv4 address, and their browser doesn't support TLS SNI.
Apr
1
asked Does http support encryption without https (like STARTTLS)?
Feb
20
asked Is mosh now recommended by the security experts? (2014)
Dec
25
comment Does it make sense to keep RC4?
Isn't ChaCha20 a stream cipher? And more secure than RC4 at that?
Dec
11
asked What does chacha20-poly1305@openssh.com mean for me?
Dec
6
awarded  Yearling
Dec
3
asked Does having non-ECC SDRAM affect security of the system?
Dec
2
revised Renting a remote server with IPMI: is one vulnerable?
simplify
Dec
2
revised Renting a remote server with IPMI: is one vulnerable?
clarify that the question is from a perspective of a customer that has no physical access to the rented products
Dec
1
asked Renting a remote server with IPMI: is one vulnerable?
Dec
1
asked Is it safe to do full disc encryption without ECC DRAM?
Nov
26
asked Why is ICMP timestamping disabled on OS X?
Nov
26
awarded  Nice Question
Nov
25
suggested suggested edit on dnssec tag wiki excerpt
Nov
25
revised dnssec wiki excerpt
added 109 characters in body
Nov
25
revised nginx wiki excerpt
added 76 characters in body
Nov
25
awarded  Tag Editor
Nov
25
revised dnssec wiki description
added 272 characters in body