17,156 reputation
974235
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 3 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Jul
24
asked Can any ECC field element be safely serialized as “compressed” and then restored as uncompressed?
Jul
20
asked What considerations should apply for self service Renewing, Revoking, or Unrevoking a certificate?
Jul
20
asked Is there a repository of credentials used in training materials/samples and SDKs?
Jul
13
answered determine X.509 certificate class
Jul
13
asked What crypto prevents & detects “invisible” CAs? (e.g. in X509v4)
Jul
10
answered Exchange 2013 blocks txt file attachments - are there security reasons?
Jul
8
answered Does ASP.NET guarantee the integrity of a page's controls on a post back?
Jul
7
asked Are “Certificate Templates” used only as a “Template” or do they validate a certificate request?
Jul
6
asked Simplifying SMIME by re-using the Public & Private key across email accounts
Jul
3
answered What is the technical rationale behind intermediary email servers?
Jul
1
asked From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Jul
1
answered Public key encryption vs Digital signatures
Jul
1
asked Is it possible to covertly tunnel data using L3DSR? (or any other TCP or IP layer hack)
Jun
30
answered Why isn't it possible for a third party to decrypt HTTPS traffic?
Jun
24
asked Does SMIME differ from TLS, PGP, DMARC signature, or a Portal Encrypted email message in terms of legal non-repudiation?
Jun
24
answered Are login “certificates” more secure than standard username + password authentication?
Jun
24
asked How can I get a fiddler-style trace of an iPhone / Android?
Jun
23
asked Android Kitkat reports: “Network May Be Monitored by an Unknown Third Party” when using non-default root CA
Jun
23
answered Authenticating AD user over TCP socket
Jun
21
asked Is SCEP safe if I use a different long and complex password per enrollment, and validate it against expected parameters?