16,583 reputation
861216
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 5 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jan
24
answered Why are Windows computers open to network file access by default?
Jan
23
awarded  Notable Question
Jan
21
accepted Why is OAuth 2.0 being used for mobile devices, and not OpenID?
Jan
17
revised Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
added 163 characters in body
Jan
17
comment Why are OSX users of my TLS-only site being asked to supply a client certificate?
yes, open a ticket with them.
Jan
17
comment Why are OSX users of my TLS-only site being asked to supply a client certificate?
Almost all client certificate UI's are horrible. Perhaps you're behind a load balancer or your firewall has a broken reverse NAT, where it's shuffling traffic between many hosts.
Jan
16
awarded  Announcer
Jan
14
awarded  Popular Question
Jan
13
awarded  Popular Question
Jan
8
revised Is it possible for an attacker to change my sent emails content before arrival?
added 208 characters in body
Jan
8
answered Is it possible for an attacker to change my sent emails content before arrival?
Jan
7
awarded  Notable Question
Jan
6
awarded  Famous Question
Jan
6
awarded  Popular Question
Dec
29
revised What criteria should be used for manually reviewing / prioritizing failed logins?
deleted 1 characters in body
Dec
29
asked What criteria should be used for manually reviewing / prioritizing failed logins?
Dec
29
accepted Can a mismatched server encoding on HTTP POST or GET result in a security issue?
Dec
12
awarded  Popular Question
Dec
11
awarded  Popular Question
Dec
11
comment How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
@paj28 SSL can be hacked if the CA is hacked (which has been done before), and also in my way if keys are stored in DNS