Reputation
Next tag badge:
80/100 score
26/20 answers
Badges
20 122 315
Impact
~1.4m people reached

13h
revised How can mobile sign-on be secured from imposter authentication screens?
added 358 characters in body
13h
asked How can mobile sign-on be secured from imposter authentication screens?
14h
comment Are the rules used to validate certificates in the major browsers documented anywhere?
Not to mention if CRLs are used, AIAs if the whole chain is sent, HTS, DANE, OCSP. THEN we get to talk about cipher suites, validation for special features (Same Origin), Channel Based Cookies, version downgrade support, KeyUsages, EKU, support for the Critical keys, validation of intermediate keys (some don't check revoked intermediates). This is a big, but awesome question.
2d
comment How important is split-horizon DNS?
If you're using Windows DNS, it should be pretty easy to use Powershell to iterate through all the records and update them with the contents of the external DNS server (Get-DnsServerResourceRecord)
2d
awarded  Nice Question
2d
comment How important is split-horizon DNS?
Sometimes, there is a technical infrastructure need for this (AD), and the rationale, and extra complexity /hassle is a side effect. Sometimes the initiative for this design isn't security related.
2d
comment Possible for Lync (Skype for Business) to adopt Activesync-style policies?
@schroeder I'm OK with the move - what happens to the bounty (doesn't matter really to me)
2d
accepted Do any Exchange hardening guidelines recommend disabling OWA Webready? Should they?
2d
answered Do any Exchange hardening guidelines recommend disabling OWA Webready? Should they?
2d
revised How can I demonstrate that 3 independent root CAs validated my domain?
added 224 characters in body
Aug
29
revised How can I demonstrate that 3 independent root CAs validated my domain?
edited title
Aug
29
comment What are the performance and security tradeoffs when selecting “ECC” or “Subgroup” in a U-Prove token?
@CodesInChaos Bouncy Castle changed and improved their ECC implementation. Does the issue you describe still exist? (timing attack, slowness, etc)
Aug
29
comment How can I demonstrate that 3 independent root CAs validated my domain?
@DavidHoude Added additional context
Aug
29
comment How can I demonstrate that 3 independent root CAs validated my domain?
@NicBarker It would be hard to do, but I'll take any approach.
Aug
29
revised How can I demonstrate that 3 independent root CAs validated my domain?
added 243 characters in body
Aug
29
asked How can I demonstrate that 3 independent root CAs validated my domain?
Aug
28
comment Proving an encrypted message contains (but does not 100% consist of) a plain-text message?
Homomorphic encryption, and specifically the Pedersen commitment may help you here. For more advanced crypto questions, please see: crypto.stackexchange.com
Aug
27
awarded  Popular Question
Aug
26
comment When do honest people need privacy or anonymity? (e.g. they have nothing to hide)
@paj28 LOVE it!
Aug
26
asked How do I identify sensitive information in a Minidump file?