Reputation
607
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
8 21
Newest
 Yearling
Impact
~18k people reached

  • 0 posts edited
  • 1 helpful flag
  • 89 votes cast
Apr
29
awarded  Yearling
Apr
29
asked What is the relationship between “SHA-2” and “SHA-256”
Feb
25
awarded  Popular Question
Feb
23
awarded  Popular Question
Jan
1
accepted What is a practical example of an action that violates the non-interference model?
Oct
23
awarded  Popular Question
Oct
23
asked Can an end-entity certificate with SHA-1 be issued by an intermediate CA that has SHA-256?
Oct
23
accepted What is the difference between “key length” and “bit strength”?
Oct
21
awarded  Nice Question
Oct
21
revised What is the difference between “key length” and “bit strength”?
Typo in title
Oct
21
asked What is the difference between “key length” and “bit strength”?
Oct
20
accepted What is the difference between a “Thumbprint Algorithm” “Signature Algorithm” and “Signature Hash Algorithm” for a certificates?
Oct
20
asked What is the difference between a “Thumbprint Algorithm” “Signature Algorithm” and “Signature Hash Algorithm” for a certificates?
Sep
20
comment What certificate attributes can I check to verify if an issuer is correct?
I think I found the answer. Most of the time, you can compare the authority key identifier extension value of a certificate with the subject key identifier extension value of the intermediate/root CA it's directly connected to. They should match.
Sep
20
asked What certificate attributes can I check to verify if an issuer is correct?
Aug
25
asked Why do certificate authorities often require/use multiple intermediates?
Jul
3
accepted What is the proper terminology for the various SMTP tunnel encryption solutions?
Jul
2
awarded  Curious
Jun
25
comment What is the proper terminology for the various SMTP tunnel encryption solutions?
@executifs Sorry if I was unclear. I'm referring to features like TLS_Srv:secure.domain ENCR:112 in sendmail which lets you require a minimum bit strength for a TLS session and defer the message if the other side doesn't have TLS or doesn't meet the minimum requirement. Details here: sendmail.com/sm/open_source/docs/m4/starttls.html
Jun
25
comment What is the proper terminology for the various SMTP tunnel encryption solutions?
@executifs That would make sense if I didn't require the use of STARTTLS when sending to some domains but I don't think it is necessarily appropriate for all use cases of option 1. For example, what if I explicitly require the use of STARTTLS when sending to bob.com?