16,573 reputation
861215
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 3 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Nov
3
answered How does using OpenID affect webapp security?
Nov
3
revised What encryption prevents the tampering of Windows Identity Foundation (WIF) FedAuth cookies?
deleted 214 characters in body
Nov
3
asked What encryption prevents the tampering of Windows Identity Foundation (WIF) FedAuth cookies?
Nov
2
awarded  Nice Question
Nov
2
comment What is more secure: Many subdirectories, or many subdomains?
@Rory And accepted for the same reason! Good idea, though I wonder how that will complicate authentication and single sign on among the various domains
Nov
2
accepted What is more secure: Many subdirectories, or many subdomains?
Nov
2
accepted My DNS Name Server does not support DNSSec client queries, what alternatives do I have?
Nov
2
accepted What browsers support encryption or decryption using local certificates, or smartcard readers?
Nov
1
awarded  Organizer
Nov
1
revised Android security without updates
edited tags
Oct
31
asked How do I deploy AD in a hostile location? What are the security implications between Domains, Forests vs RODC's in Active Directory?
Oct
31
answered Why do people think that this is bad way to hash passwords?
Oct
31
revised Should anyone support / implement P3P policies? Do they matter? Are they legally binding?
added 122 characters in body
Oct
30
asked Websites that interactively test browser security (XSS, CSRF, Javascript, etc)
Oct
29
revised Inconsistencies found in OpenID Provider's HTTP Headers. Which one is the most secure that I should imitate in my STS, and Relying Party?
added 52 characters in body
Oct
29
comment What does a Yadis / XRDS discovery session “look like” to the end user? How does it work? Is it relevant?
@HendrikBrummermann Is an OpenID provider and a Yadis / XRDS implementation one of the same?
Oct
29
comment What are the downsides of BrowserID/Persona compared to OpenID/OAuth/Facebook?
Cardspace has been discontinued by MSFT , Replacement is UProve. How does this relate / compare to UProve?
Oct
29
comment What does a Yadis / XRDS discovery session “look like” to the end user? How does it work? Is it relevant?
I'll read the spec, but I just don't get when and how the HTTP header or Meta tag is processed/used
Oct
29
revised What does a Yadis / XRDS discovery session “look like” to the end user? How does it work? Is it relevant?
added 33 characters in body; edited title
Oct
29
revised Should anyone support / implement P3P policies? Do they matter? Are they legally binding?
deleted 102 characters in body