21,128 reputation
19108296
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 6 months
seen 31 mins ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


Mar
27
accepted Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Mar
27
revised Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
added 97 characters in body
Mar
27
asked Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Mar
26
awarded  Popular Question
Mar
26
revised Does Activesync certificate authentication replace a password, or act as 2 factor?
deleted 119 characters in body; edited title
Mar
25
comment Is PGP or S/MIME useful when both servers are self-controlled?
Do you trust your backup tapes, where they are archived off site?
Mar
25
accepted It it a good idea to whitelist inbound email using a Hash on the address? (Similar to BATV, but with DKIM)
Mar
24
comment In DNSSec, are Delegation Signer Records always SHA-1?
The more I learn about DNSSec, the less I like it. sockpuppet.org/blog/2015/01/15/against-dnssec
Mar
24
revised In DNSSec, are Delegation Signer Records always SHA-1?
edited tags
Mar
24
asked In DNSSec, are Delegation Signer Records always SHA-1?
Mar
24
awarded  Nice Question
Mar
23
awarded  Nice Question
Mar
22
revised Securing 2 factor data from apps that are co-located on the same device?
edited title
Mar
22
revised Is it unwise to use Redis to store PII, private keys, and other secrets?
added 48 characters in body
Mar
22
comment Is it unwise to use Redis to store PII, private keys, and other secrets?
Thank you for the tips regarding design, mitigation, and the threat assessment.
Mar
22
comment Is it unwise to use Redis to store PII, private keys, and other secrets?
Perhaps if a partial load happened old, unaccessed secrets would be safe. Either database-side row level auditing would tell what was exposed over time, or the app can update a last-accessed field.
Mar
22
revised Is it unwise to use Redis to store PII, private keys, and other secrets?
edited title
Mar
22
asked Is it unwise to use Redis to store PII, private keys, and other secrets?
Mar
21
answered Is it possible to set up a second router with the same SSID to get the password?
Mar
20
answered Does forwarding email result in an extra “persistence” of it's copy?