708 reputation
514
bio website mikestechspot.blogspot.com
location Detroit, MI
age 29
visits member for 2 years, 6 months
seen Jul 13 at 16:27

Too Many Interests to list, SE accounts speak for themselves. Christian, Programmer, IT Professional, Embedded enthusiast, chess player, the list goes on.


Interested in all things Embedded?

Stack Exchange Q&A site proposal: Embedded Systems Programming and Design


Jun
19
awarded  Popular Question
Apr
20
accepted Why do some bank websites use passwords that are not case sensitive?
Apr
18
awarded  Popular Question
Apr
18
awarded  Nice Question
Apr
17
comment Why do some bank websites use passwords that are not case sensitive?
Nice answer, any cites to back this up?
Apr
17
comment Why do some bank websites use passwords that are not case sensitive?
Only 20 years old?
Apr
17
comment Should I trust my bank after this
Perhaps you can shed some light on my question then.
Apr
17
asked Why do some bank websites use passwords that are not case sensitive?
Jan
15
awarded  Yearling
Dec
18
comment Why does Windows Ship with Expired SSL Certificates?
@ruakh yes, I actually upvoted that answer back in the day when it was popular just because it was popular, without fact checking first, because it sounds like it should be right. You can see my recent comment here, it's only half true. By default CAs do not include that information, but at least RedHat and Microsoft CAs have options to include that information. You honestly brought up a good point though.
Dec
18
comment Why do we not trust an SSL certificate that expired recently?
This is only half true, RedHat says: By default, CRLs do not contain information about revoked expired certificates. The server can include revoked expired certificates by enabling that option for the issuing point. Microsoft also says ...You can enable a registry setting on a CA to ensure that revoked certificates that have expired are not removed from the CRL.
Dec
18
comment Why does Windows Ship with Expired SSL Certificates?
also @ruakh if the certificate has been revoked, it doesn't matter if it's expired or not, revokation kicks in if there is CRL checking enabled. So, unless the server knows it's compromised, it has to assume it isn't. It can still check the CRL for expired certs.
Dec
18
awarded  Guru
Dec
17
awarded  Good Answer
Dec
17
comment Why does Windows Ship with Expired SSL Certificates?
Thanks @Josef, I figured but I didn't want to conjecture without actual proof, I'm not what you call a PKI expert, yet
Dec
17
comment Why does Windows Ship with Expired SSL Certificates?
@Cthulhu if they signed something before they were expired then that makes that signature valid, according to Microsoft
Dec
17
awarded  Mortarboard
Dec
17
awarded  Enlightened
Dec
17
awarded  Nice Answer
Dec
17
awarded  Yearling