17,156 reputation
974235
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 39 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
added 868 characters in body; edited title
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
deleted 474 characters in body; edited title
Jul
9
awarded  Notable Question
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
deleted 23 characters in body; edited title
Jul
8
revised How to encode a username in PKIX certificate?
edited tags
Jul
8
answered Does ASP.NET guarantee the integrity of a page's controls on a post back?
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
well; they don't make it easy, do they ;) Thanks for the tip, I'll be chomping away at the code shortly.
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
The reason I ask the above question is because CCertRequest.Submit() in Certcli.dll doesn't have an overload to specify a template. This happens to be the same object used in the ASP page in https://caserver/certsrv default issuing website. I'm curious what will happen if a PKCS10 is submitted without that above mentioned extension, and which template the CA relates it to (more importantly what logic the CA uses to choose between similar templates)
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Thank you; Are you familiar with how a template is specified with the API for a PKCS 10 request without a template mentioned in the request? A dump shows that the OID is 1.3.6.1.4.1.311.21.7 located within Certificate Extensions however I'm not sure how this would be specified when submitting the request. (e.g. Template, Major/minor version) MSDN link
Jul
8
accepted Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jul
8
revised Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
added 344 characters in body
Jul
8
revised Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
added 6 characters in body; edited title
Jul
7
awarded  Popular Question
Jul
7
asked Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jul
7
awarded  Popular Question
Jul
7
comment Simplifying SMIME by re-using the Public & Private key across email accounts
@c-US The problem I'm trying to solve is to make signing and encryption easier when using multiple, different email accounts that deliver to the same inbox. For example jsmith@contoso.com jsmith@company.com and jsmith@xbox.com have all been acquired by Microsoft. We want an auditor to only need one key to decrypt all 3 of those messages.
Jul
6
revised Simplifying SMIME by re-using the Public & Private key across email accounts
edited tags
Jul
6
revised Simplifying SMIME by re-using the Public & Private key across email accounts
added 112 characters in body
Jul
6
asked Simplifying SMIME by re-using the Public & Private key across email accounts
Jul
6
comment What web browsers support OCSP stapling? Are the privacy and performance features the same?
What do they mean by "but an attacker close to the server can get certificates issued from many CAs and deploy different certificates as needed." in the Blog?