16,610 reputation
862216
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 2 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


5h
accepted What Twitter #hashtags apply to IT Security
1d
awarded  Notable Question
Apr
21
revised Is Google Drive security compromised?
edited title
Apr
20
awarded  Popular Question
Apr
18
comment How would I implement “Broadcast Encryption”?
Related crypto.stackexchange.com/q/1247/371
Apr
11
awarded  Popular Question
Apr
11
comment Does HTTPS retrieval, among its other effects, sign a document?
IP address "signing" is of weak utility. If the "ownership" of the IP address comes into question, the whole signing scheme falls apart. Creative, but bad idea
Apr
10
comment How to explain Heartbleed without technical terms?
Heartbleed allows an attacker to anonymously download a random chunk of memory of the server. This means they can get unencrypted passwords, and low-level encryption keys that protect your account... not to mention that an attacker might be able to access any part of the website (or data that you post into that site)
Apr
7
awarded  Nice Question
Apr
5
awarded  Popular Question
Apr
4
answered When you buy a certificate, does the certificate authority have (a copy of) the private key?
Mar
29
awarded  Notable Question
Mar
28
asked What are some examples of a block cipher's versatility over a stream cipher?
Mar
28
awarded  Enlightened
Mar
28
awarded  Nice Answer
Mar
28
revised Are there any systems out there that use a one-time pad?
deleted 5 characters in body
Mar
27
revised Are there any systems out there that use a one-time pad?
added 12 characters in body
Mar
27
comment Are there any systems out there that use a one-time pad?
@jarnbjo You're right but I didn't get into that use case. Is there a word to describe that early transfer of an OTP secret for pending, future use by one or more messages?
Mar
27
answered How can I see if SSL Certificate is Business SSL?
Mar
27
revised Are there any systems out there that use a one-time pad?
added 9 characters in body