20,616 reputation
18107291
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 5 months
seen 1 hour ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


1h
comment Can free email provider's partners and affiliates read your emails?
In theory they can also edit your emails, and create valid looking replies.
9h
revised How does combining SHA256 with RIPE-MD160 compare to SHA256 + SHA-3?
deleted 7 characters in body
21h
awarded  Popular Question
1d
asked How does combining SHA256 with RIPE-MD160 compare to SHA256 + SHA-3?
1d
revised How does SHA3 (Keccak & SHAKE) compare to SHA2? Should I use non-SHAKE parameters?
added 70 characters in body
1d
asked How does SHA3 (Keccak & SHAKE) compare to SHA2? Should I use non-SHAKE parameters?
1d
asked Should other processes be running while an iPhone or Android is generating a cryptographically random number?
2d
revised Effectiveness of Security Images
added 380 characters in body
2d
comment Should SSL be terminated at a load balancer?
@PiyushKansal Some companies have a network layer VPN in these instances, so you don't have to worry about this, but if this doesn't exist yes, I would re-encrypt. I don't know about your particular situation, but there may be things to consider like the SafeHarbor ( safeharbor.export.gov/list.aspx ) trust lists, and your company's legal responsibility in an international situation like yours
Apr
16
awarded  Famous Question
Apr
16
awarded  Popular Question
Apr
14
awarded  Nice Answer
Apr
14
awarded  Good Question
Apr
13
asked What are the privacy and infosec risks with Apple Watches and Android Wear?
Apr
13
awarded  Notable Question
Apr
12
revised Are old Android WebViews a risk to Activesync email, and how do I block old devices?
edited title
Apr
12
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
@schroeder I'm writing an app for iOS and Android that requests resolution of a DNS name. I assume that no such extension exists, or for idealistic reasons, it doesn't exist either. I want to have a guarantee to my app that the DNS host is really the DNS host that is expected ... (using a local resolver, or an imported Java or iOS resolver)
Apr
10
accepted What bits of data is revoked in a CRL? Is it the hash(CSR) or hash(CSR + PKI signature)
Apr
10
comment Official proof (document) that Linux is safer and faster than Windows
This is opinion, and therefore no such document will exist.
Apr
10
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
I just read that note... somewhat abstract points he is saying. He does seem to say that a "local policy" is what trumps a global policy... specifically on the Caching Server. If a caching server is in my "local policy" realm of influence, I don't see why I can't have a local policy that says "ensure that this DNS label is not spoofed via DNSSEC". Since he works for Ultra, and I'm a UltraDNS customer, I'll open a support ticket....