17,231 reputation
974236
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 1 hour ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
28
accepted What are some examples of a block cipher's versatility over a stream cipher?
Jul
24
accepted Can any ECC field element be safely serialized as “compressed” and then restored as uncompressed?
Jul
21
accepted What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
Jul
13
accepted What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
accepted From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Jul
9
accepted Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
Jul
8
accepted Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jun
23
accepted How widely deployed is TLS with cipher ECDHE?
Apr
24
accepted What Twitter #hashtags apply to IT Security
Mar
19
accepted Is there a widely used protocol which builds on AES/GCM, and defines serialization formats of A, IV, C and T together?
Mar
10
accepted Is the Litecoin Scrypt hashing technique a threat to hashed passwords?
Mar
10
accepted In a 3 tier (or more) PKI, is it permissible that a Name Constraint only be defined on the middle tier?
Jan
21
accepted Why is OAuth 2.0 being used for mobile devices, and not OpenID?
Dec
29
accepted Can a mismatched server encoding on HTTP POST or GET result in a security issue?
Nov
5
accepted Chrome SSL Warning: “You cannot proceed because the website operator has requested heightened security for this domain. ”
Oct
17
accepted In theory, can x509 certificates use Accumulator-based revocation schemes? How do these schemes work?
Oct
3
accepted In the SilkRoad takedown, what does it mean “An IP address was leaking” in Tor?
Sep
13
accepted Is there any way to cryptographically hash a human thumbprint?
Sep
4
accepted Are kiosk-style, full screen apps possible on iOS, Android, or Windows phone?
Aug
14
accepted Should the email address in the SOA be used to validate domain control?