18,010 reputation
1385259
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 4 years
seen 19 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
20
asked Is there a repository of credentials used in training materials/samples and SDKs?
Jul
18
awarded  Popular Question
Jul
13
comment Private Tor networks: what are the benefits, and how would it be accomplished?
3 years later I think I can re-ask this question more intelligently. I would like to have a ToR like P2P network that restricts the data it carries, like Bitcoin's distributed database. This could be done with crypto, and the extent it can be hacked is up to the validation when a node accepts a message / datagram. Thanks for your help
Jul
13
comment What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Thank you, this makes a ton of sense. What does the || symbol mean in h(c||m)? I suspect is it similar to Bitcoin's HD key generation github.com/bitcoin/bips/blob/master/bip-0032.mediawiki
Jul
13
accepted What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited tags
Jul
13
comment determine X.509 certificate class
@HaukeLaging You're probably talking about assurance? ietf.org/rfc/rfc3647.txt (low assurance, medium, or high) and the meaning of each is defiend in the CPS
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
edited title
Jul
13
answered determine X.509 certificate class
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 4 characters in body
Jul
13
revised What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
added 162 characters in body
Jul
13
asked What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
13
accepted From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Jul
11
awarded  Popular Question
Jul
11
revised From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
added 855 characters in body
Jul
11
revised What should I know before configuring Perfect Forward Secrecy?
deleted 1 character in body
Jul
10
comment What implementations are possible for dual control?
You will likely need a custom Winlogon GINA to accommodate this. I'm not aware of any implementation... msdn.microsoft.com/en-us/library/windows/desktop/…
Jul
10
revised Exchange 2013 blocks txt file attachments - are there security reasons?
added 6 characters in body
Jul
10
answered Exchange 2013 blocks txt file attachments - are there security reasons?
Jul
10
awarded  Announcer