makerofthings7

12,481 reputation

331134

bio	website	lamontconsulting.com
	location	New York, NY
	age	36
visits	member for	2 years, 6 months
	seen	3 hours ago
stats	profile views	635

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack

About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk

	12,481 reputation	bio	website	lamontconsulting.com	visits	member for	2 years, 6 months
331134 badges		location	New York, NY		seen	3 hours ago

summary answers questions tags badges favorites 1 bounties reputation activity

219 Accepts

suggestions reviews revisions comments badges posts accepts all

Mar 4	accepted	Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?
Mar 4	accepted	Can a Javascript - WebGL proof of work system prevent website spam?
Feb 25	accepted	What is more secure for voice and SMS OTP: A random number or generated similar to HOTP?
Feb 22	accepted	Should Framebusting be used (not used) on an IdP login page?
Feb 21	accepted	What is the purpose of the hashcode used in Exchange OWA HTTP requests?
Feb 17	accepted	Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Feb 9	accepted	*How can I constrain or limit 3rd party Javascript (.js) files that can DOS my site?**
Feb 9	accepted	Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2
Jan 26	accepted	How does “check.torproject.org.” know if you're using TOR?
Jan 10	accepted	What damage could be done if a malicious certificate had an identical “Subject Key Identifier”?
Jan 8	accepted	What should a CRL file name look like when “new” and “delta” CRLs are generated?
Jan 8	accepted	Is it a good idea to generate certificate-specific CRLs? What is this technique called?
Jan 7	accepted	Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI?
Jan 5	accepted	IE on Windows 2012 doesn't show certificate or lock icon despite using HTTPS
Jan 5	accepted	What happens to a certificate's Basic Constraints when a policy map is used?
Jan 4	accepted	What OID Issuance Policies are appropriate for SmartCard and Browser Certificates?
Jan 4	accepted	How do I import a PKSC#12 private key into Java 5 (which may require PKCS#7)
Dec 29	accepted	Do client certificates provide protection against MITM?
Dec 28	accepted	What issues might exist with TLS-OBC's emulation of Browser Certificates?
Dec 27	accepted	Chrome SSL Warning: “You cannot proceed because the website operator has requested heightened security for this domain. ”