meta user
network profile
| bio | website | hightechrealm.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 11 months |
| seen | Feb 6 at 4:43 | |
| stats | profile views | 3 |
|
Aug 15 |
revised |
Is there any technical security reason not to buy the cheapest SSL certificate you can find? deleted 228 characters in body |
|
Aug 15 |
comment |
Is there any technical security reason not to buy the cheapest SSL certificate you can find? @curiousguy - Thank you for pointing that out, and your answer below. I've edited my post accordingly and I'm going to adjust my own policies also. Thanks! |
|
Aug 14 |
answered | Is there any technical security reason not to buy the cheapest SSL certificate you can find? |
|
Mar 28 |
comment |
Is diskcryptor really secure? Ah, thanks for the clarification on that. As I don't often deal with regulated environments I typically have clients using less stringent software. |
|
Mar 27 |
awarded | Teacher |
|
Mar 26 |
comment |
Is diskcryptor really secure? Almost all software - paid or free has an AS IS clause in the EULA so the company is shielded from exactly the scenario you mention. Regardless of the case, the responsibility is pretty much always placed on the person who deploys and manages the system. If makers were liable, Microsoft and others would be bankrupt by now |
|
Mar 26 |
answered | Is diskcryptor really secure? |
|
Mar 26 |
answered | What are possible approaches and arguments for securing corporate IT systems with most computers being portable? |
|
Sep 23 |
comment |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? I see, thanks very much again for that clarification. The fact extra code was used really is what threw me off because I'm used to hearing about MITM attacks which are simpler, so that point really now helps put this in perspective. |
|
Sep 23 |
awarded | Editor |
|
Sep 23 |
revised |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? Clarified the question so it isn't speculative and more based on solid facts. |
|
Sep 23 |
comment |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? Okay, sorry about that I'll make that change right now. I think that I should've worded it first by saying "would it fall within the standard warranty of SSL certs" rather than asking will payouts be mandated since I based the question heavily on the fine print of those guarantees rather than whether it will be pursued |
|
Sep 22 |
awarded | Student |
|
Sep 22 |
awarded | Scholar |
|
Sep 22 |
accepted | SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? |
|
Sep 22 |
comment |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? Also just to clarify, as explained in the accepted answer, the new SSL attack is more of a man in the middle attack rather than the certificate being decrypted and broken, so it looks like most SSL issuers won't have to worry about payouts from the new attack. |
|
Sep 22 |
comment |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? Ah I see. So this brand new flaw is just another man in the middle attack, so just like prior exploits, the CA's aren't on the hook because this attack isn't breaking the encryption but rather posing as the valid party and then being given access to the data? I had a feeling the new attack wasn't within the realm of the CA's but the way it was explained in many articles made it sound like SSL has been broken and that the certificates were useless. |
|
Sep 22 |
comment |
SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? Sorry for the lack of details. Just for simplicity, I'm providing the link for the Verisign EV certificate as it has a $1.5 million warranty, but also I picked that brand as I know it's the most ubiquitous when it comes to online security (although I'll say Comodo and GeoTrust also are brands I'd link to) verisign.com/ssl/buy-ssl-certificates/… |
|
Sep 22 |
asked | SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? |
|
Aug 3 |
awarded | Supporter |
