17,632 reputation
981247
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 10 months
seen 1 hour ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Aug
16
awarded  Popular Question
Aug
16
comment Suspicious 2 page, no image Word Docx has 1.7 MB
Try uploading to VirusTotal...
Aug
16
comment Suspicious 2 page, no image Word Docx has 1.7 MB
I think fonts can be a virus vector...
Aug
16
revised Suspicious 2 page, no image Word Docx has 1.7 MB
added 129 characters in body
Aug
16
answered Suspicious 2 page, no image Word Docx has 1.7 MB
Aug
14
accepted What is the risk that Windows 8's loopback protection feature protects me from?
Aug
14
revised What is the risk that Windows 8's loopback protection feature protects me from?
edited title
Aug
14
asked What is the risk that Windows 8's loopback protection feature protects me from?
Aug
14
revised What is the point of secure email gateways?
edited body
Aug
14
comment What is the point of secure email gateways?
Whoops yes. BYOD
Aug
14
answered What is the point of secure email gateways?
Aug
13
comment Does where I put my PKI certificates matter?
I've never fully understood the security implications of storing certs in different folders, though there are cases I've seen it matter (XBAP in Trusted Publishers for example)
Aug
13
comment Is there a secure way to create and distribute Shamir Secrets?
That is very cool, I'll be thinking about that for a bit.
Aug
13
comment Is there a secure way to create and distribute Shamir Secrets?
Oh and I assume that "collaborating private key owners recover the original plaintext" is where "plaintext" can equal a secret key
Aug
13
comment Is there a secure way to create and distribute Shamir Secrets?
I'll try to ask differently. If I have a secret X, when using the Shamir method, a person or trusted system must know X in order to split that secret. The Group method would encrypt X, but would also need a person or system that is trusted. My question is about dynamically composing a secret that no-one knows, and decrypting it. I don't think I'm crazy because these ECC keys have an additive property that provides secrecy. (regarding me being crazy - I'm definitely naive in crypto and respect the fact I have much to learn, might be way offtrack)
Aug
12
comment Is there a secure way to create and distribute Shamir Secrets?
If a group is used for asymmetric encryption, then that encrypting node needs to be trusted, right? Is there a way to eliminate that trust?
Aug
12
asked Is there a secure way to create and distribute Shamir Secrets?
Aug
11
comment Authenticate WCF call to ADFS through Web Application Proxy (WAP)
The proxy has the ability to enable/disable different protocols for which it will proxy. Make sure this is enabled for your endpoint. That being said, I've never done this particular scenario before.
Aug
9
revised Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?
added 83 characters in body
Aug
9
asked Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?