141 reputation
3
bio website
location
age 18
visits member for 1 year, 7 months
seen 22 hours ago

Junior IT Security student at Ruhr University Bochum.
Collecting experiences with

  • Web Application Development,
  • Database Administration and
  • Data Modelling.

Also actively working with HTTP, Web Infrastructure, and especially .


Sep
24
awarded  Autobiographer
Apr
11
comment Why does TLS need an explicit heartbeat protocol?
SSL makes no assumptions on the underlying transport protocol. UDP, for instance, is unreliable and you might still want to implement SSL/TLS upon it. @Ramhound Wouldn't these hundreds of thousands of very smart people have been able to detect this exploit earlier? I mean not checking memory bounds is a greenhorn mistake.
Apr
11
comment Why does TLS need an explicit heartbeat protocol?
For reference, RFC 6520 Section 1 states why a heartbeat extension is useful for DTLS: The only mechanism available at the DTLS layer to figure out if a peer is still alive is a costly renegotiation and DTLS needs to perform path MTU (PMTU) discovery but has no specific message type to realize it without affecting the transfer of user messages.
Mar
13
answered What is nuke it from orbit?
Mar
12
awarded  Supporter
Mar
12
awarded  Teacher
Mar
11
answered Should private messages be encrypted?