16,553 reputation
861215
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 4 months
seen 5 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Apr
11
awarded  Popular Question
Apr
11
comment Does HTTPS retrieval, among its other effects, sign a document?
IP address "signing" is of weak utility. If the "ownership" of the IP address comes into question, the whole signing scheme falls apart. Creative, but bad idea
Apr
10
comment How to explain Heartbleed without technical terms?
Heartbleed allows an attacker to anonymously download a random chunk of memory of the server. This means they can get unencrypted passwords, and low-level encryption keys that protect your account... not to mention that an attacker might be able to access any part of the website (or data that you post into that site)
Apr
7
awarded  Nice Question
Apr
5
awarded  Popular Question
Apr
4
answered When you buy a certificate, does the certificate authority have (a copy of) the private key?
Mar
29
awarded  Notable Question
Mar
28
asked What are some examples of a block cipher's versatility over a stream cipher?
Mar
28
awarded  Enlightened
Mar
28
awarded  Nice Answer
Mar
28
revised Are there any systems out there that use a one-time pad?
deleted 5 characters in body
Mar
27
revised Are there any systems out there that use a one-time pad?
added 12 characters in body
Mar
27
comment Are there any systems out there that use a one-time pad?
@jarnbjo You're right but I didn't get into that use case. Is there a word to describe that early transfer of an OTP secret for pending, future use by one or more messages?
Mar
27
answered How can I see if SSL Certificate is Business SSL?
Mar
27
revised Are there any systems out there that use a one-time pad?
added 9 characters in body
Mar
27
answered Are there any systems out there that use a one-time pad?
Mar
26
awarded  Notable Question
Mar
26
comment How does data.stackexchange.com allow queries securely?
If you're using Windows, you can expose your data with ODATA (Microsoft WCF) and set filters to dynamically alter or throttle inbound queries.
Mar
25
answered How to encrypt more than 16 bytes using AES?
Mar
25
answered Can I use elliptic curve DSA in a secure message service?