16,583 reputation
861216
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 2 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Dec
11
comment How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
@paj28 SSL is vulnerable to DNS issues, especially at the second layer. A DNS server higher in the hierarchy can send out spoofed IP address to different hosts and allow a MITM or other attacks if DNS were compromised.
Dec
11
revised How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
added 44 characters in body; edited title
Dec
11
revised How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
added 404 characters in body; edited title
Dec
11
revised How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
added 132 characters in body; edited title
Dec
11
asked How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
Dec
10
awarded  Announcer
Dec
9
answered Can a zero knowledge proof of voting be made using a trusted auth server (without client side crypto)?
Dec
8
comment What are the security measures taken on GPS transmissions?
Here is an interesting article about GPS hijacking non military drones through spoofing wired.com/dangerroom/2012/07/drone-gps-spoof/all
Dec
6
awarded  Popular Question
Dec
4
awarded  Popular Question
Dec
4
comment What are the realistic chances of email being intercepted via SMTP/TCP-IP?
There is another way to word this question to get the answers you seek.
Dec
3
answered How and when should I use OpenSSL for IT Security? How do I understand the output?
Dec
3
comment Purpose of using base64 encoded urls
Exactly... my point is that it may not be a security issue at all, though it's easy to assume that all reasons things are done are security related when viewed in the context of this site.
Dec
3
revised Purpose of using base64 encoded urls
added 122 characters in body
Dec
3
comment Purpose of using base64 encoded urls
@Adnan Perhaps this is a platform issue, specific to ASP.NET MVC? My test website seems to interpret encoded urls as the incorrect route. e.g. append the encoded version of ?callback=http://host.com/test
Dec
3
revised Purpose of using base64 encoded urls
added 37 characters in body
Dec
3
answered Purpose of using base64 encoded urls
Dec
2
asked Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)
Dec
2
asked Can a mismatched server encoding on HTTP POST or GET result in a security issue?
Dec
2
comment How can I prevent tracking by ETAGs?
It's best on StackOverflow: "Will this protect me from etag tracking, and will it work with existing ETAG implementations" ... since its possible a weak and strong ETAG implementations may have different results. ... but try StackOverflow.com first, and perhaps link to this question via the share button so you can get "referrer" points.