meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 9 months |
| seen | Feb 17 at 18:46 | |
| stats | profile views | 6 |
|
Mar 26 |
awarded | Popular Question |
|
Feb 17 |
awarded | Critic |
|
Sep 21 |
awarded | Yearling |
|
Aug 9 |
accepted | How to properly validate HTTP redirects? |
|
Aug 9 |
accepted | Canonicalization & Output Encoding |
|
Aug 9 |
asked | Canonicalization & Output Encoding |
|
Aug 9 |
asked | How to properly validate HTTP redirects? |
|
Jul 3 |
accepted | Internal SSL Certificates? |
|
Jul 3 |
comment |
Internal SSL Certificates? Awesome answer (+1) - thank you Shivam; I wish I could split the "green check" between both you and @Bart but Bart was first ~ thanks again! |
|
Jul 3 |
accepted | Types of attacks outside of AppSec and Vendor-Specific Systems? |
|
Jul 2 |
comment |
Internal SSL Certificates? Ahhh - so one more time (just so I completely understand): (1) my end users and my frontend servers communicate over a SSL cert generated from a known CA (like VeriSign); (2) as soon as the request is consumed from my frontend server, all subsequent communication uses SSL certs generated by either: (a) OpenSSL, or (b) my own CA that I set up. Am I on target? And thanks again! |
|
Jul 2 |
comment |
Internal SSL Certificates? That's a great suggestion - thanks (+1)! If I did that - if I set up my own private CA and asked my frontend servers to trust it, would my end users' browsers trust it? Or would they still get the nasty warning messages? |
|
Jul 2 |
asked | Internal SSL Certificates? |
|
Jul 2 |
accepted | Open Source Vulnerability Scanner |
|
Jul 2 |
asked | Open Source Vulnerability Scanner |
|
Jul 2 |
asked | Types of attacks outside of AppSec and Vendor-Specific Systems? |
|
Jul 2 |
accepted | OWASP Top 10? How about OWASP Top 1000? |
|
Jul 2 |
comment |
OWASP Top 10? How about OWASP Top 1000? Awesome answer - thanks @Rory - I figured CVE would crop up in some answers and this was just the kind of structure I was looking for. Thanks again |
|
Jul 2 |
asked | OWASP Top 10? How about OWASP Top 1000? |
|
Jul 2 |
asked | How do I use OpenSSL with the Java Keytool? |
