11,452 reputation
23380
bio website neal.mcburnett.org
location Boulder, CO
age
visits member for 3 years, 5 months
seen Apr 14 at 13:32

I like to engage in "Technology Serving Community" via free software.

Consultant, Ubuntu member, Wikipedia contributor since 2002, ElectionAudits developer, Boulder Community Network co-founder, Internet2 consultant for IDtrust, author of pgpstat, Android enthusiast, ex-Bell Labs web/security/standards maven....

See my web site for way more: http://neal.mcburnett.org/


Mar
17
revised How easily are keyloggers foiled?
fix typo
Mar
2
awarded  Popular Question
Feb
28
comment Why should one not use the same asymmetric key for encryption as they do for signing?
@user93353 If your workplace escrows a signing key, then they can impersonate you, sign statements on your behalf, get you in trouble, etc. I've never heard of a good use case for that. So your signing key pair should be yours alone. If there is a need for escrow of an encryption keypair (to provide access to data created by you but owned by your workplace, e.g.) it should be a separate keypair.
Feb
28
comment Why should one not use the same asymmetric key for encryption as they do for signing?
@user93353 Is there something about your earlier comment on symmetric vs public keys that I'm missing then?
Feb
27
accepted Describe an example of indistinguishability obfuscation or functional encryption
Feb
27
comment Why should one not use the same asymmetric key for encryption as they do for signing?
@user93353 If a public key is only used for encryption, what would your objection to escrowing it in a workplace setting be?
Feb
11
awarded  Necromancer
Feb
7
awarded  Popular Question
Feb
7
awarded  Good Question
Feb
4
asked Describe an example of indistinguishability obfuscation or functional encryption
Jan
30
awarded  Good Answer
Jan
28
awarded  Famous Question
Jan
17
awarded  Popular Question
Dec
21
comment Certificate Transparency
Thanks! Which version of Chrome has CT support?
Dec
21
comment Certificate Transparency
See Ben Laurie's answer for why neither all browsers nor all servers need to support CT.
Dec
21
revised How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
update 6 - ANSSI, Trustwave, Certificate Transparency
Dec
10
comment Prove that you deleted the file
The point you make about trust is good. But your reference to Snapchat, even with the caveat, suggests that you haven't considered all the other ways documented on this page that a recipient can keep a copy.
Nov
23
awarded  Yearling
Nov
21
awarded  Popular Question
Nov
21
awarded  Favorite Question