141 reputation
2
bio website
location
age 18
visits member for 1 year, 1 month
seen Apr 11 at 16:40

Senior High School student collecting experiences with Web Application Development, DBA and Data Modelling. Also actively working with Proxying, Load Balancing, and especially .


Apr
11
comment Why does TLS need an explicit heartbeat protocol?
SSL makes no assumptions on the underlying transport protocol. UDP, for instance, is unreliable and you might still want to implement SSL/TLS upon it. @Ramhound Wouldn't these hundreds of thousands of very smart people have been able to detect this exploit earlier? I mean not checking memory bounds is a greenhorn mistake.
Apr
11
comment Why does TLS need an explicit heartbeat protocol?
For reference, RFC 6520 Section 1 states why a heartbeat extension is useful for DTLS: The only mechanism available at the DTLS layer to figure out if a peer is still alive is a costly renegotiation and DTLS needs to perform path MTU (PMTU) discovery but has no specific message type to realize it without affecting the transfer of user messages.
Mar
13
answered What is nuke it from orbit?
Mar
12
awarded  Supporter
Mar
12
awarded  Teacher
Mar
11
answered Should private messages be encrypted?