17,492 reputation
979242
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 9 months
seen 11 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
21
comment What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
The password portion is more for the scenario a user can't produce a ZKP. This can happen if they can't find their certificate/smart card or if they lose it at the bottom of the ocean. If they happen to find the smart card, (similar losing their keys and finding them again) I want to permit the user to unrevoke the certificate, but want to prevent a hostile user from doing so.
Jul
21
comment What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
Thank you; for your reference I'm using accumulator-based revocations / unrevocations with ABC4Trust (UProve and Idemix), and Pedersen Commitments to handle when a user is permitted to login (time of day/ day of week). If a prover sends a ZKP to the issuer, then the issuer will authenticate the user and authorize the action for "renew", "good Samaritan revoke".
Jul
21
accepted What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
Jul
21
revised What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
edited title
Jul
20
revised What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
added 151 characters in body
Jul
20
asked What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
Jul
20
asked Is there a repository of credentials used in training materials/samples and SDKs?
Jul
18
awarded  Popular Question
Jul
13
comment Private Tor networks: what are the benefits, and how would it be accomplished?
3 years later I think I can re-ask this question more intelligently. I would like to have a ToR like P2P network that restricts the data it carries, like Bitcoin's distributed database. This could be done with crypto, and the extent it can be hacked is up to the validation when a node accepts a message / datagram. Thanks for your help
Jul
13
comment What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Thank you, this makes a ton of sense. What does the || symbol mean in h(c||m)? I suspect is it similar to Bitcoin's HD key generation github.com/bitcoin/bips/blob/master/bip-0032.mediawiki
Jul
13
accepted What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited tags
Jul
13
comment determine X.509 certificate class
@HaukeLaging You're probably talking about assurance? ietf.org/rfc/rfc3647.txt (low assurance, medium, or high) and the meaning of each is defiend in the CPS
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited title
Jul
13
answered determine X.509 certificate class
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 4 characters in body
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 162 characters in body
Jul
13
asked What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
accepted From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Jul
11
awarded  Popular Question