467 reputation
14
bio website
location
age
visits member for 1 year, 8 months
seen Aug 2 at 21:16

Jun
29
comment Klein and PTW wep attack
If the negative numbers are not expected, are you sure you aren't using signed where you should be using unsigned?
Jun
29
answered Why self-signed https is less trustworthy than unencrypted http?
Jan
2
awarded  Yearling
Dec
14
answered PHP on IIS 7.5 Hacked - How do I find and fix the XSS Injection?
Dec
14
answered How to ensure an email address is not free webmail or ISP address?
Dec
13
answered Does an email signature increase security?
Dec
13
comment using asymmetric encryption to encrypt private key
@Arun: The "private key" up there refers to the symmetric key.
Dec
13
comment Site preventing user from closing tab/closing browser
@Rook: Please provide the bugzilla link if public.
Dec
13
answered using asymmetric encryption to encrypt private key
Dec
13
comment Site preventing user from closing tab/closing browser
@blade19899: Ah, ok, I thought you opened a report in the bug reporting tool for the underlying issue. Nevermind then and thanks for reporting!
Dec
13
awarded  Commentator
Dec
13
comment Site preventing user from closing tab/closing browser
@blade19899: Could you please post the link to the bug report(s) if they are public?
Dec
13
comment What web browsers support OCSP stapling? Are the privacy and performance features the same?
Firefox 26 now includes OCSP stapling support as per an announcement on mozilla.dev.security.policy.
Dec
12
answered Evil certificate authority in public-key-infrastructure
Dec
12
answered What protection certificates would be required for an application that consists of setup, loading utility and main application?
Dec
12
answered Is it possible to digitally sign information with a password?
Dec
12
comment Who tells that TrueCrypt is secure?
It should be noted that said French government group is also the one that certified that their own CA is secure and following best practices. The CA that has countless Sub-CAs which have mississued certs for MitM purposes, domains with typos, and example domains...
Dec
12
answered Who tells that TrueCrypt is secure?
Dec
8
comment Why not hashing and salting passwords?
If my experience taught me anything, it is to not question why people would do stupid things - and never to assume that "noone can be that stupid" to do something really dumb.
Feb
25
answered Why do we not trust an SSL certificate that expired recently?