21,123 reputation
19108296
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 6 months
seen 42 mins ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


Apr
14
awarded  Nice Answer
Apr
14
awarded  Good Question
Apr
13
asked What are the privacy and infosec risks with Apple Watches and Android Wear?
Apr
13
awarded  Notable Question
Apr
12
revised Are old Android WebViews a risk to Activesync email, and how do I block old devices?
edited title
Apr
12
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
@schroeder I'm writing an app for iOS and Android that requests resolution of a DNS name. I assume that no such extension exists, or for idealistic reasons, it doesn't exist either. I want to have a guarantee to my app that the DNS host is really the DNS host that is expected ... (using a local resolver, or an imported Java or iOS resolver)
Apr
10
accepted What bits of data is revoked in a CRL? Is it the hash(CSR) or hash(CSR + PKI signature)
Apr
10
comment Official proof (document) that Linux is safer and faster than Windows
This is opinion, and therefore no such document will exist.
Apr
10
comment Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
I just read that note... somewhat abstract points he is saying. He does seem to say that a "local policy" is what trumps a global policy... specifically on the Caching Server. If a caching server is in my "local policy" realm of influence, I don't see why I can't have a local policy that says "ensure that this DNS label is not spoofed via DNSSEC". Since he works for Ultra, and I'm a UltraDNS customer, I'll open a support ticket....
Apr
10
comment How to get started with DNSSEC?
@schroeder I should have put this in my comment, NSEC3 is an enhancement that prevents the enumeration of a DNSSEC zone, the way that the default NSEC does. You can enumerate all my DNS records if you enable "confirm non exist domains" at Verisign or some of the other online scanners. Experiment with getvalid.com if you want.
Apr
10
asked Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?
Apr
10
comment How to get started with DNSSEC?
IMHO - Look for a DNS Server that has NSEC3 support... If you find one let me know. I may be migrating away from dyn.com because of this.
Apr
9
comment In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?
Does my edit to the post clarify / constrain what's to be proven sufficiently?
Apr
9
comment In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?
Also, in all cases, the data sets (product IDs for eBay, and users on a ballot) are common knowledge. The users selection of a product or candidate are private, along with the paring of a bid or a ranked preference, is also private
Apr
9
comment In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?
@this.josh I need to verify that the contents is data an encrypted vote for a person (a single value of a set for first past the post FPTP, or ranked 1st place 2nd place, etc for alternative vote). The data segments should be small, product ID + bid.
Apr
9
revised In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?
added 259 characters in body
Apr
9
comment In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?
Thank you, I'd be interested in learning what constraints are possible..
Apr
8
revised Use the server's key to digitally sign the HTML content it delivered?
deleted 27 characters in body
Apr
6
awarded  Popular Question
Apr
6
awarded  Altruist