156 reputation
2
bio website netsekure.org
location
age
visits member for 3 years
seen Jul 16 '13 at 18:40

Mar
1
comment What project is a good SILC substitute?
You could combine XMPP with ORT (off the record) messaging, to achieve secrecy, if this is what you are after. You never say what "niche" SILC fills, so it is hard to know what features you are looking for.
Jan
26
comment Can accounts still be logged onto if Password Caching is not enabled?
You could also enable BitLocker on Vista and above to provide full disk encryption.
Aug
10
comment Convergence - an SSL replacement?
Actually, the aggressive caching of certs this way is very bad. If a cert is compromised, then no browser will check for revocation information until the cert is expired, which is worse than today's model. Also, random connections to random servers for the Notary can be blocked inside an organization, so you fail to connect.
Jul
29
comment How can I determine the encryption strength of an SSL connection
Are you asking for client side in the browser or how to extract this on the server to be returned on the web page you are serving?
Jul
27
comment Definition of Software Security
I wouldn't say software security is getting rid of those bugs, rather writing a software in a way that even with bugs it is resilient to attack.
Jul
22
comment Data Encryption and Key Management in C#
DPAPI is user specific, so if you plan to transport the encrypted data to another machine or another user, you won't be able to decrypt it. Keep this in mind and see if it fits your design.
Jul
21
comment SSL TLS renegotiation vulnerability - current situation in clients
For one, the use of different port numbers was blocked by the proxy on one of the connections I used. That immediately flaged all browsers as vulnerable.
Jul
21
awarded  Teacher
Jul
21
awarded  Supporter
Jul
21
answered SSL TLS renegotiation vulnerability - current situation in clients