16,573 reputation
861215
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 10 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Mar
11
comment How secure is Samy Kamkar's Anti-MITMA Diffie-Hellman Key Exchange Technique?
move to crypto.SE?
Mar
10
comment Is this where a nonce comes into play?
A userID should not act as a bearer token. Bearer tokens for web api access should have an expiration, different each time they log in, and different for each user. A bearer token shouldn't contain the User id directly in it, however the server should know how to determine the userID from a given token.
Mar
10
comment What are the benefits to a two-page login system for a webapp?
@Warren, yes that's probably Sitekey. Read about it here security.stackexchange.com/q/26347/396
Mar
10
revised What are the benefits to a two-page login system for a webapp?
added 300 characters in body
Mar
10
answered What are the benefits to a two-page login system for a webapp?
Mar
10
accepted Is the Litecoin Scrypt hashing technique a threat to hashed passwords?
Mar
10
asked Is the Litecoin Scrypt hashing technique a threat to hashed passwords?
Mar
10
accepted In a 3 tier (or more) PKI, is it permissible that a Name Constraint only be defined on the middle tier?
Mar
7
awarded  Popular Question
Mar
5
awarded  Popular Question
Mar
4
asked .NET provides 8+ ways to encode data to prevent XSS attacks. Which one should I use when?
Mar
2
awarded  Necromancer
Mar
1
awarded  Announcer
Feb
27
awarded  Popular Question
Feb
27
awarded  Famous Question
Feb
20
asked In a 3 tier (or more) PKI, is it permissible that a Name Constraint only be defined on the middle tier?
Feb
20
awarded  Popular Question
Feb
18
comment Why does the RFC 5280 dictate the CAs not to issue certificates with negative serial numbers?
Please see this answer regarding why serial numbers should be random security.stackexchange.com/q/15690/396
Feb
12
awarded  Popular Question
Feb
12
awarded  Nice Answer