1,754 reputation
616
bio website cs.uwaterloo.ca/~j5clark
location Toronto, Canada
age 33
visits member for 4 years
seen Feb 19 at 19:25

Postdoctoral fellow interested in authentication and cryptographic voting.


2d
awarded  Yearling
Aug
26
awarded  Nice Answer
Nov
19
awarded  Yearling
May
8
awarded  Nice Question
Nov
19
awarded  Yearling
Sep
11
comment CRIME - How to beat the BEAST successor?
This publication may also be relevant: "TLS Compression Fingerprinting and a Privacy-aware API for TLS." It is possible the browsers disabled compression because of this result. cosic.esat.kuleuven.be/ecrypt/provpriv2012/abstracts/…
Aug
14
awarded  Caucus
Jul
24
comment Domain name expiration and TLS
@Bruno Correct. I envision it as only detecting domains that have gone through the entire 75 day drop process. I think it safe to assume that the domain has changed hands after this. I wouldn't trust the information provided in whois records enough to try and discern ownership transfers from the information itself. It is a simple mechanism to detect the clear cut cases (and could have an option to warn on any change).
Jul
24
comment Domain name expiration and TLS
@Bruno It wouldn't reject in that case. But in 11 months, if the domain wasn't renewed by the same entity, then it would. The domain reg would 1 month old and the cert would be issued at least 11 months prior.
Jul
24
comment Domain name expiration and TLS
After thinking about this, it seems the browser is better positioned to address this issue. It could compare the registration date for the domain from the whois record with the certificate issuing date, and only accept if the certificate date is later in time.
Jul
24
comment Domain name expiration and TLS
Thanks Bruno. My question is more about the last paragraph of your answer: is it common practice for a CA to consider/monitor domain expiration? Do browsers consider this issue in their root certificate policies?
Jul
23
awarded  Student
Jul
23
asked Domain name expiration and TLS
Jun
8
awarded  Constituent
Jun
8
awarded  Caucus
Jan
10
awarded  Announcer
Nov
19
awarded  Yearling
Oct
7
awarded  Nice Answer
Aug
18
awarded  Nice Answer
Aug
9
awarded  Enthusiast