17,850 reputation
1183258
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 11 months
seen 14 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Aug
12
asked Is there a secure way to create and distribute Shamir Secrets?
Aug
11
comment Authenticate WCF call to ADFS through Web Application Proxy (WAP)
The proxy has the ability to enable/disable different protocols for which it will proxy. Make sure this is enabled for your endpoint. That being said, I've never done this particular scenario before.
Aug
9
revised Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?
added 83 characters in body
Aug
9
asked Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?
Aug
6
awarded  Notable Question
Aug
6
awarded  Popular Question
Aug
5
revised How does an insecure RNG affect cryptography, and how do I measure the corresponding loss of security?
edited title
Aug
5
revised How does an insecure RNG affect cryptography, and how do I measure the corresponding loss of security?
added 49 characters in body; edited title
Aug
5
comment How is ZixCorp able to provide email encryption without a password?
Interesting... I don't see a zixvpm MX record for gmail or google. Most VPM integrations required this. I wonder what changed with the product.
Aug
5
revised How does an insecure RNG affect cryptography, and how do I measure the corresponding loss of security?
deleted 72 characters in body
Aug
5
asked How does an insecure RNG affect cryptography, and how do I measure the corresponding loss of security?
Aug
4
awarded  Popular Question
Aug
3
answered How does a country block/censor an encrypted website (HTTPS)?
Aug
1
awarded  Popular Question
Jul
31
comment Should SSL be terminated at a load balancer?
@TylerCollier thanks for your comments. I clarified.
Jul
31
revised Should SSL be terminated at a load balancer?
added 530 characters in body
Jul
31
awarded  Nice Answer
Jul
31
comment Is there a secret-sharing public-key-encryption-based service?
Google "Portal Based Encryption"... there are many secure email portals that offload the key management and solves the issue that you're having.
Jul
31
awarded  Necromancer
Jul
31
awarded  Popular Question