17,632 reputation
981247
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 10 months
seen 1 hour ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Mar
5
revised For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
deleted 289 characters in body
Mar
5
revised Active Directory: Should Workstations be separated from servers to protect from related domain hacks?
edited tags
Mar
5
comment What cookie attacks are possible between computers in related DNS domains (*.example.com)?
Thank you; I think this has implications for Active Directory... your advice on the linked question is appreciated
Mar
5
asked Active Directory: Should Workstations be separated from servers to protect from related domain hacks?
Mar
5
revised For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
deleted 182 characters in body
Mar
5
revised For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
edited title
Mar
5
asked Chrome Frame is an example of how browsers “merge together”. How can I unmerge all of them?
Mar
5
answered For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Mar
5
asked For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Mar
5
asked What cookie attacks are possible between computers in related DNS domains (*.example.com)?
Mar
5
revised Issuing browser certificates to Chrome and Firefox with Microsoft CA
added 1 characters in body
Mar
5
asked Are there any same origin issues (SOP) with TOR?
Mar
4
comment Issuing browser certificates to Chrome and Firefox with Microsoft CA
@ordag - Updated
Mar
4
revised Issuing browser certificates to Chrome and Firefox with Microsoft CA
added 278 characters in body
Mar
4
asked Issuing browser certificates to Chrome and Firefox with Microsoft CA
Mar
4
asked How does “check.torproject.org.” know if you're using TOR?
Mar
4
comment Can I instruct a Telco to prevent 2G connections from our phones?
@DavidSchwartz If they don't have direct control over partners, is information (verified or not) passed along that describes the connection type?
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
I'm simply comparing the security that a Windows 2008R2 server offers against TOR. Windows server offers TLS 1.2 and if Tor is 1.0, that is a valid point of comparison
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
That is great; does TOR use TLS 1.2 and or is it immune to TLS attacks such as BEAST and others?
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Thank you mgjk - So now we are in the same frame of mind... given that a HTTPS connection has so many security issues (documented on this site), how does a TOR based connection compare?