377 reputation
114
bio website mikeberggren.com
location California
age 30
visits member for 3 years, 8 months
seen Nov 11 at 23:39

Technology Enthusiast, Gamer, Sci-Fi Addict, and DIY-er in training. =)


Oct
23
awarded  Popular Question
Oct
23
asked Can an end-entity certificate with SHA-1 be issued by an intermediate CA that has SHA-256?
Oct
23
accepted What is the difference between “key length” and “bit strength”?
Oct
21
awarded  Nice Question
Oct
21
revised What is the difference between “key length” and “bit strength”?
Typo in title
Oct
21
asked What is the difference between “key length” and “bit strength”?
Oct
20
accepted What is the difference between a “Thumbprint Algorithm” “Signature Algorithm” and “Signature Hash Algorithm” for a certificates?
Oct
20
asked What is the difference between a “Thumbprint Algorithm” “Signature Algorithm” and “Signature Hash Algorithm” for a certificates?
Sep
20
comment What certificate attributes can I check to verify if an issuer is correct?
I think I found the answer. Most of the time, you can compare the authority key identifier extension value of a certificate with the subject key identifier extension value of the intermediate/root CA it's directly connected to. They should match.
Sep
20
asked What certificate attributes can I check to verify if an issuer is correct?
Aug
25
asked Why do certificate authorities often require/use multiple intermediates?
Jul
3
accepted What is the proper terminology for the various SMTP tunnel encryption solutions?
Jul
2
awarded  Curious
Jun
25
comment What is the proper terminology for the various SMTP tunnel encryption solutions?
@executifs Sorry if I was unclear. I'm referring to features like TLS_Srv:secure.domain ENCR:112 in sendmail which lets you require a minimum bit strength for a TLS session and defer the message if the other side doesn't have TLS or doesn't meet the minimum requirement. Details here: sendmail.com/sm/open_source/docs/m4/starttls.html
Jun
25
comment What is the proper terminology for the various SMTP tunnel encryption solutions?
@executifs That would make sense if I didn't require the use of STARTTLS when sending to some domains but I don't think it is necessarily appropriate for all use cases of option 1. For example, what if I explicitly require the use of STARTTLS when sending to bob.com?
Jun
24
asked What is the proper terminology for the various SMTP tunnel encryption solutions?
Oct
18
awarded  Popular Question
Sep
20
awarded  Popular Question
Apr
15
awarded  Yearling
Sep
8
awarded  Autobiographer