16,608 reputation
862216
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 2 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Dec
2
comment How can I prevent tracking by ETAGs?
It's best on StackOverflow: "Will this protect me from etag tracking, and will it work with existing ETAG implementations" ... since its possible a weak and strong ETAG implementations may have different results. ... but try StackOverflow.com first, and perhaps link to this question via the share button so you can get "referrer" points.
Dec
2
comment How can I prevent tracking by ETAGs?
It's a great idea, but having it buried as an answer to my question may not get the visibility it deserves
Dec
2
comment How can I prevent tracking by ETAGs?
Perhaps post this as a question asking if this is a viable workaround for the HTTP ETAG security / privacy flaw
Dec
2
comment Suggestions on easy distribution/installation of self signed certificates & roots to mobile devices
for what it's worth, Microsoft created a browser plugin (XMLHTTPRequest) that later became the foundation of all AJAX across all browsers. It's a shame that nobody else adopted this standard or created anything better.
Dec
2
comment Suggestions on easy distribution/installation of self signed certificates & roots to mobile devices
@Rook - Given that HTML 5's keygen enrollment is a fail Microsoft created a browser object to make it better in early 2000's. It's likely that his deployment is based on this object.
Nov
28
awarded  Notable Question
Nov
26
awarded  Nice Question
Nov
26
comment Are there any reasons to be concerned about the security of “Coin”?
IMHO - credit card "technology" is woefully outdated and should be replaced with something that is more secure.
Nov
26
asked How should developers handle Form POST variables that conflict with route variables?
Nov
20
awarded  Yearling
Nov
20
awarded  Famous Question
Nov
17
awarded  Popular Question
Nov
14
awarded  Famous Question
Nov
14
asked Guidance for “image based” password reset challenge
Nov
13
asked Do normal SMS risks apply to DigiCel mobile banking? What mitigations are likely in place?
Nov
13
awarded  Popular Question
Nov
13
comment How can I secure IP Multicast traffic?
@SanderSteffann I'm sure this problem has been solved more efficiently than O(N) by Satellite companies, cable boxes, etc. I'm hoping it's also native to IPv6
Nov
12
revised What type of information should be shown to an end user for a logon session summary?
added 245 characters in body
Nov
12
asked What type of information should be shown to an end user for a logon session summary?
Nov
12
asked How can I secure IP Multicast traffic?