17,422 reputation
976241
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 9 months
seen 7 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jun
29
awarded  Notable Question
Jun
28
awarded  Notable Question
Jun
25
revised Are login “certificates” more secure than standard username + password authentication?
added 80 characters in body
Jun
24
asked Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
Jun
24
comment Are login “certificates” more secure than standard username + password authentication?
@tobik You have a "page" that selects the certificate? Sounds like client side JS crypto. Can you link to the page? If client side crypto in JS is being used, there are many issues in their implementation.
Jun
24
answered Are login “certificates” more secure than standard username + password authentication?
Jun
24
asked How can I get a fiddler-style trace of an iPhone / Android?
Jun
24
comment Android Kitkat reports: “Network May Be Monitored by an Unknown Third Party” when using non-default root CA
Just discovered that it has been reopened as #62644 .. I'll read it later today. So far I like this solution
Jun
24
revised Android Kitkat reports: “Network May Be Monitored by an Unknown Third Party” when using non-default root CA
added 186 characters in body
Jun
23
comment What are Implicit and Explicit Certificates in Public Key Cryptography?
Is Idemix and UProve an example of Identity Certificates you describe? I'm asking so I can grasp the structural advantages.
Jun
23
asked Android Kitkat reports: “Network May Be Monitored by an Unknown Third Party” when using non-default root CA
Jun
23
comment Authenticating AD user over TCP socket
Rather this: msdn.microsoft.com/en-us/…
Jun
23
comment Authenticating AD user over TCP socket
@Josh - See msdn.microsoft.com/en-us/gg557876
Jun
23
answered Authenticating AD user over TCP socket
Jun
23
accepted How widely deployed is TLS with cipher ECDHE?
Jun
21
asked Is SCEP safe if I use a different long and complex password per enrollment, and validate it against expected parameters?
Jun
19
asked Should an SMIME signing and encryption key have different expiration dates?
Jun
19
awarded  Notable Question
Jun
19
revised Checklist on building an Offline Root & Intermediate Certificate Authority (CA)
added 1639 characters in body
Jun
18
revised Is it possible to create a SMIME only PKI that *can't* be used for SSL?
added 181 characters in body