21,073 reputation
19108296
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 6 months
seen 9 hours ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


Apr
19
revised How does combining SHA256 with RIPE-MD160 compare to SHA256 + SHA-3?
deleted 7 characters in body
Apr
18
awarded  Popular Question
Apr
18
asked How does combining SHA256 with RIPE-MD160 compare to SHA256 + SHA-3?
Apr
18
revised How does SHA3 (Keccak & SHAKE) compare to SHA2? Should I use non-SHAKE parameters?
added 70 characters in body
Apr
17
asked How does SHA3 (Keccak & SHAKE) compare to SHA2? Should I use non-SHAKE parameters?
Apr
17
asked Should other processes be running while an iPhone or Android is generating a cryptographically random number?
Apr
17
revised Effectiveness of Security Images
added 380 characters in body
Apr
17
comment Should SSL be terminated at a load balancer?
@PiyushKansal Some companies have a network layer VPN in these instances, so you don't have to worry about this, but if this doesn't exist yes, I would re-encrypt. I don't know about your particular situation, but there may be things to consider like the SafeHarbor ( safeharbor.export.gov/list.aspx ) trust lists, and your company's legal responsibility in an international situation like yours
Apr
16
awarded  Famous Question
Apr
16
awarded  Popular Question
Apr
14
awarded  Nice Answer
Apr
14
awarded  Good Question
Apr
13
asked What are the privacy and infosec risks with Apple Watches and Android Wear?
Apr
13
awarded  Notable Question
Apr
12
revised Are old Android WebViews a risk to Activesync email, and how do I block old devices?
edited title
Apr
12
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
@schroeder I'm writing an app for iOS and Android that requests resolution of a DNS name. I assume that no such extension exists, or for idealistic reasons, it doesn't exist either. I want to have a guarantee to my app that the DNS host is really the DNS host that is expected ... (using a local resolver, or an imported Java or iOS resolver)
Apr
10
accepted What bits of data is revoked in a CRL? Is it the hash(CSR) or hash(CSR + PKI signature)
Apr
10
comment Official proof (document) that Linux is safer and faster than Windows
This is opinion, and therefore no such document will exist.
Apr
10
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
I just read that note... somewhat abstract points he is saying. He does seem to say that a "local policy" is what trumps a global policy... specifically on the Caching Server. If a caching server is in my "local policy" realm of influence, I don't see why I can't have a local policy that says "ensure that this DNS label is not spoofed via DNSSEC". Since he works for Ultra, and I'm a UltraDNS customer, I'll open a support ticket....
Apr
10
comment How to get started with DNSSEC?
@schroeder I should have put this in my comment, NSEC3 is an enhancement that prevents the enumeration of a DNSSEC zone, the way that the default NSEC does. You can enumerate all my DNS records if you enable "confirm non exist domains" at Verisign or some of the other online scanners. Experiment with getvalid.com if you want.