178 reputation
6
bio website hightechrealm.com
location
age
visits member for 3 years, 3 months
seen Apr 21 at 3:12

Aug
2
awarded  Popular Question
Aug
15
revised Is there any technical security reason not to buy the cheapest SSL certificate you can find?
deleted 228 characters in body
Aug
15
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
@curiousguy - Thank you for pointing that out, and your answer below. I've edited my post accordingly and I'm going to adjust my own policies also. Thanks!
Aug
14
answered Is there any technical security reason not to buy the cheapest SSL certificate you can find?
Mar
28
comment Is diskcryptor really secure?
Ah, thanks for the clarification on that. As I don't often deal with regulated environments I typically have clients using less stringent software.
Mar
27
awarded  Teacher
Mar
26
comment Is diskcryptor really secure?
Almost all software - paid or free has an AS IS clause in the EULA so the company is shielded from exactly the scenario you mention. Regardless of the case, the responsibility is pretty much always placed on the person who deploys and manages the system. If makers were liable, Microsoft and others would be bankrupt by now
Mar
26
answered Is diskcryptor really secure?
Mar
26
answered What are possible approaches and arguments for securing corporate IT systems with most computers being portable?
Sep
23
comment SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
I see, thanks very much again for that clarification. The fact extra code was used really is what threw me off because I'm used to hearing about MITM attacks which are simpler, so that point really now helps put this in perspective.
Sep
23
awarded  Editor
Sep
23
revised SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Clarified the question so it isn't speculative and more based on solid facts.
Sep
23
comment SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Okay, sorry about that I'll make that change right now. I think that I should've worded it first by saying "would it fall within the standard warranty of SSL certs" rather than asking will payouts be mandated since I based the question heavily on the fine print of those guarantees rather than whether it will be pursued
Sep
22
awarded  Student
Sep
22
awarded  Scholar
Sep
22
accepted SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Sep
22
comment SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Also just to clarify, as explained in the accepted answer, the new SSL attack is more of a man in the middle attack rather than the certificate being decrypted and broken, so it looks like most SSL issuers won't have to worry about payouts from the new attack.
Sep
22
comment SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Ah I see. So this brand new flaw is just another man in the middle attack, so just like prior exploits, the CA's aren't on the hook because this attack isn't breaking the encryption but rather posing as the valid party and then being given access to the data? I had a feeling the new attack wasn't within the realm of the CA's but the way it was explained in many articles made it sound like SSL has been broken and that the certificates were useless.
Sep
22
comment SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?
Sorry for the lack of details. Just for simplicity, I'm providing the link for the Verisign EV certificate as it has a $1.5 million warranty, but also I picked that brand as I know it's the most ubiquitous when it comes to online security (although I'll say Comodo and GeoTrust also are brands I'd link to) verisign.com/ssl/buy-ssl-certificates/…
Sep
22
asked SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity?