17,432 reputation
976241
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 9 months
seen 16 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
10
awarded  Announcer
Jul
9
accepted Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
added 868 characters in body; edited title
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
deleted 474 characters in body; edited title
Jul
9
awarded  Notable Question
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
deleted 23 characters in body; edited title
Jul
8
revised How to encode a username in PKIX certificate?
edited tags
Jul
8
answered Does ASP.NET guarantee the integrity of a page's controls on a post back?
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
well; they don't make it easy, do they ;) Thanks for the tip, I'll be chomping away at the code shortly.
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
The reason I ask the above question is because CCertRequest.Submit() in Certcli.dll doesn't have an overload to specify a template. This happens to be the same object used in the ASP page in https://caserver/certsrv default issuing website. I'm curious what will happen if a PKCS10 is submitted without that above mentioned extension, and which template the CA relates it to (more importantly what logic the CA uses to choose between similar templates)
Jul
8
comment Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Thank you; Are you familiar with how a template is specified with the API for a PKCS 10 request without a template mentioned in the request? A dump shows that the OID is 1.3.6.1.4.1.311.21.7 located within Certificate Extensions however I'm not sure how this would be specified when submitting the request. (e.g. Template, Major/minor version) MSDN link
Jul
8
accepted Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jul
8
revised Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
added 344 characters in body
Jul
8
revised Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
added 6 characters in body; edited title
Jul
7
awarded  Popular Question
Jul
7
asked Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jul
7
awarded  Popular Question
Jul
7
comment Simplifying SMIME by re-using the Public & Private key across email accounts
@c-US The problem I'm trying to solve is to make signing and encryption easier when using multiple, different email accounts that deliver to the same inbox. For example jsmith@contoso.com jsmith@company.com and jsmith@xbox.com have all been acquired by Microsoft. We want an auditor to only need one key to decrypt all 3 of those messages.
Jul
6
revised Simplifying SMIME by re-using the Public & Private key across email accounts
edited tags
Jul
6
revised Simplifying SMIME by re-using the Public & Private key across email accounts
added 112 characters in body