17,780 reputation
1183256
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 11 months
seen 36 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
13
accepted What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited tags
Jul
13
comment determine X.509 certificate class
@HaukeLaging You're probably talking about assurance? ietf.org/rfc/rfc3647.txt (low assurance, medium, or high) and the meaning of each is defiend in the CPS
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited title
Jul
13
answered determine X.509 certificate class
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 4 characters in body
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 162 characters in body
Jul
13
asked What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
accepted From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Jul
11
awarded  Popular Question
Jul
11
revised From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
added 855 characters in body
Jul
11
revised What should I know before configuring Perfect Forward Secrecy?
deleted 1 character in body
Jul
10
comment What implementations are possible for dual control?
You will likely need a custom Winlogon GINA to accommodate this. I'm not aware of any implementation... msdn.microsoft.com/en-us/library/windows/desktop/…
Jul
10
revised Exchange 2013 blocks txt file attachments - are there security reasons?
added 6 characters in body
Jul
10
answered Exchange 2013 blocks txt file attachments - are there security reasons?
Jul
10
awarded  Announcer
Jul
9
accepted Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
added 868 characters in body; edited title
Jul
9
revised Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
deleted 474 characters in body; edited title
Jul
9
awarded  Notable Question