60 reputation
4
bio website
location
age
visits member for 1 year, 4 months
seen 9 hours ago

9h
asked Using the Synchronizer Token pattern, should you ensure the CSRF token is only communicated via HTTPS?
Mar
26
awarded  Teacher
Mar
25
answered Length of CSRF Token
Aug
15
comment Java SecureRandom doesn't block? How?
Simple, answers my question, backs up his claims. Thanks and +1. (That is +1 if I had enough reputation to upvote...)
Aug
15
accepted Java SecureRandom doesn't block? How?
Aug
14
awarded  Student
Aug
14
asked Java SecureRandom doesn't block? How?
Jan
11
awarded  Scholar
Jan
11
accepted Precedent for an in-house cardholder information server?
Dec
17
comment Precedent for an in-house cardholder information server?
Thanks for the answer. It's very enlightening. By "can't connect to anything in the CDE", I just meant that it can't fall under the definition of things "connected to the CDE" as mentioned very near the beginning of the section "Scope of Assessment for Compliance with PCI DSS Requirements". Also, we do have in mind to initiate connections from within the CDE and we definitely intend to run our design by our QSA. I do wish we could could find out how other people have done this before diving into it, though. Anyway, many thanks. :)
Dec
14
awarded  Editor
Dec
14
comment Precedent for an in-house cardholder information server?
AJ Henderson. Thanks for your input. Unfortunately our payment gateway won't provide all of the functionality necessary to do something like that, and we probably won't be switching any time soon. Whatever we do, we'll pretty much have to do in-house.
Dec
14
revised Precedent for an in-house cardholder information server?
deleted 173 characters in body
Dec
14
comment Precedent for an in-house cardholder information server?
Hello, Polynomial. Thanks for your input. I'll edit my post.
Dec
14
asked Precedent for an in-house cardholder information server?