19,117 reputation
1592267
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 4 years, 1 month
seen 12 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Mar
15
revised What web browsers support OCSP stapling? Are the privacy and performance features the same?
added 63 characters in body
Mar
15
asked What web browsers support OCSP stapling? Are the privacy and performance features the same?
Mar
14
awarded  Good Question
Mar
14
revised Does TLS-OBC only improve security of Web Browsers? Does it improve the security of SSH?
edited tags
Mar
14
comment Can IP address be a component of 2-factor authentication?
See: How is "something you have" typically defined for two factor authentication
Mar
14
answered Blackberry QNX / Playbook encryption details
Mar
14
asked Does TLS-OBC only improve security of Web Browsers? Does it improve the security of SSH?
Mar
14
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
Welcome to SE! I found Delaware file number #5019303, so that puts this site under US jurisdiction. Just curious for our UK brethren and their unique privacy laws, will you have a dedicated instance for them, or is it not needed?
Mar
14
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
+1 Good point; Google leaks search terms to the target site. ddg doesn't.
Mar
14
comment What information is exposed by simply opening an RDP connection to the internet?
That threat mitigation is good to know about; are there similar proxy servers I could use to reduce the risk? Is the hostname or domain name exposed over HTTPS prior to fully logging in?
Mar
14
revised What information is exposed by simply opening an RDP connection to the internet?
added 27 characters in body
Mar
14
awarded  Popular Question
Mar
14
awarded  Nice Question
Mar
14
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
@HughAllen - Since whois can be completely faked, what's to prevent someone from spoofing a legitimate address from a business in NYC to the Whitehouse? Well one may be fishy, but ultimately I need a D&B number to prove incorporation of some type.
Mar
14
revised How can I prevent tracking by ETAGs?
added 682 characters in body
Mar
14
accepted Does KASUMI (A5/3) Related Key attack apply to 3G or other mobile providers?
Mar
14
accepted For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Mar
14
revised What servers or clients are immune to related-domain cookie attacks? (*.example.com)
added 171 characters in body
Mar
14
accepted What servers or clients are immune to related-domain cookie attacks? (*.example.com)
Mar
13
accepted Should I ask a user to re-authenticate if the browser thumbprint changes? Is a server side library available?