275 reputation
26
bio website
location Queensbury, NY
age 30
visits member for 2 years, 7 months
seen Mar 1 at 11:50

Java generalist, interested in security (appsec/websec), performance/tuning/gc and concurrency.


Dec
10
awarded  Popular Question
Oct
11
awarded  Notable Question
Mar
26
awarded  Popular Question
Feb
17
awarded  Critic
Sep
21
awarded  Yearling
Aug
9
accepted How to properly validate HTTP redirects?
Aug
9
accepted Canonicalization & Output Encoding
Aug
9
asked Canonicalization & Output Encoding
Aug
9
asked How to properly validate HTTP redirects?
Jul
3
accepted Internal SSL Certificates?
Jul
3
comment Internal SSL Certificates?
Awesome answer (+1) - thank you Shivam; I wish I could split the "green check" between both you and @Bart but Bart was first ~ thanks again!
Jul
3
accepted Types of attacks outside of AppSec and Vendor-Specific Systems?
Jul
2
comment Internal SSL Certificates?
Ahhh - so one more time (just so I completely understand): (1) my end users and my frontend servers communicate over a SSL cert generated from a known CA (like VeriSign); (2) as soon as the request is consumed from my frontend server, all subsequent communication uses SSL certs generated by either: (a) OpenSSL, or (b) my own CA that I set up. Am I on target? And thanks again!
Jul
2
comment Internal SSL Certificates?
That's a great suggestion - thanks (+1)! If I did that - if I set up my own private CA and asked my frontend servers to trust it, would my end users' browsers trust it? Or would they still get the nasty warning messages?
Jul
2
asked Internal SSL Certificates?
Jul
2
accepted Open Source Vulnerability Scanner
Jul
2
asked Open Source Vulnerability Scanner
Jul
2
asked Types of attacks outside of AppSec and Vendor-Specific Systems?
Jul
2
accepted OWASP Top 10? How about OWASP Top 1000?
Jul
2
comment OWASP Top 10? How about OWASP Top 1000?
Awesome answer - thanks @Rory - I figured CVE would crop up in some answers and this was just the kind of structure I was looking for. Thanks again