17,291 reputation
975238
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 3 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jun
23
comment Authenticating AD user over TCP socket
@Josh - See msdn.microsoft.com/en-us/gg557876
Jun
23
answered Authenticating AD user over TCP socket
Jun
23
accepted How widely deployed is TLS with cipher ECDHE?
Jun
21
asked Is SCEP safe if I use a different long and complex password per enrollment, and validate it against expected parameters?
Jun
19
asked Should an SMIME signing and encryption key have different expiration dates?
Jun
19
awarded  Notable Question
Jun
19
revised Checklist on building an Offline Root & Intermediate Certificate Authority (CA)
added 1639 characters in body
Jun
18
revised Is it possible to create a SMIME only PKI that *can't* be used for SSL?
added 181 characters in body
Jun
18
asked Is it possible to create a SMIME only PKI that *can't* be used for SSL?
Jun
18
awarded  Popular Question
Jun
18
comment What Enhanced Key Usages are required for PKI infrastructure tasks? (OIDs for OSPF and CRL signing, etc)
Regarding the inheritance and root eku, suppose I wanted to have a sub ca (or entire PKI tree for that matter) only issue smime... Does that that mean its impossible to constrain a ca to only issue certs of a given type, or is there a way to do so outside of the eku? ( given that the clients should reject a cert issued outside of a properly constrained hiarchy)
Jun
15
asked What is the security of Powershell “TrustedHosts”? (is it just a name match)?
Jun
13
awarded  Popular Question
Jun
11
awarded  Notable Question
Jun
10
awarded  Popular Question
Jun
9
comment Where do I report a friend's email account that has been hacked?
tell your friend directly and ask them to change their password...
Jun
9
revised Is a PCI scan required for LAN outer firewall with no open ports?
deleted 1 character in body
Jun
6
awarded  Generalist
Jun
6
comment How are private keys (sMIME, PGP, etc) synchronized across a user's devices?
If I were to focus on sMIME and PGP, and the keys were different for each device, then I would only be able to open/decrypt a given message on a given device. (e.g. a key on my cell phone vs a key on my desktop). Perhaps the dropbox approach is the only way...
Jun
6
asked How are private keys (sMIME, PGP, etc) synchronized across a user's devices?