547 reputation
510
bio website
location
age
visits member for 3 years, 7 months
seen 2 days ago

Nov
17
asked What's the typical approach to caching invalid authentication attempts?
Nov
13
awarded  Popular Question
Nov
7
awarded  Teacher
Nov
7
answered Why should I have secure passwords for sites that I pay bills on?
Sep
24
asked How could SSL certificate affect the symmetric key length?
Sep
24
comment Why do testers often use the single quote ( ' ) to test for SQL injection?
+1, also here's a related question with a nice example stackoverflow.com/q/332365/57428
Sep
10
accepted Why would HTTP client only send authentication headers once an unauthenticated request was rejected?
Sep
10
asked Why would HTTP client only send authentication headers once an unauthenticated request was rejected?
Jul
21
asked Why allow access without an access token but deny access with an invalid access token?
Jul
2
awarded  Curious
Jan
24
awarded  Civic Duty
Jun
12
awarded  Notable Question
Apr
13
awarded  Yearling
Mar
18
comment Does allowing everyone know when a server process was started pose a security risk?
@zedman9991: Whatever. What if a "malicious user" knows when my server process was started or something like that is what I want to know. Impersonation, credentials, all that stuff are all implementation details.
Mar
18
asked Does allowing everyone know when a server process was started pose a security risk?
Mar
5
awarded  Editor
Mar
5
revised Why are SSL certificates valid only from a certain date?
edited title
Mar
5
asked Why are SSL certificates valid only from a certain date?
Mar
1
accepted Why do we not trust an SSL certificate that expired recently?
Feb
25
awarded  Good Question