280 reputation
310
bio website
location Queensbury, NY
age 30
visits member for 3 years
seen Apr 23 at 18:52

Java generalist, interested in security (appsec/websec), performance/tuning/gc and concurrency.


Jul
30
awarded  Popular Question
Jul
15
awarded  Notable Question
May
18
awarded  Popular Question
May
2
awarded  Popular Question
Apr
22
awarded  Popular Question
Dec
10
awarded  Popular Question
Oct
11
awarded  Notable Question
Mar
26
awarded  Popular Question
Feb
17
awarded  Critic
Sep
21
awarded  Yearling
Aug
9
accepted How to properly validate HTTP redirects?
Aug
9
accepted Canonicalization & Output Encoding
Aug
9
asked Canonicalization & Output Encoding
Aug
9
asked How to properly validate HTTP redirects?
Jul
3
accepted Internal SSL Certificates?
Jul
3
comment Internal SSL Certificates?
Awesome answer (+1) - thank you Shivam; I wish I could split the "green check" between both you and @Bart but Bart was first ~ thanks again!
Jul
3
accepted Types of attacks outside of AppSec and Vendor-Specific Systems?
Jul
2
comment Internal SSL Certificates?
Ahhh - so one more time (just so I completely understand): (1) my end users and my frontend servers communicate over a SSL cert generated from a known CA (like VeriSign); (2) as soon as the request is consumed from my frontend server, all subsequent communication uses SSL certs generated by either: (a) OpenSSL, or (b) my own CA that I set up. Am I on target? And thanks again!
Jul
2
comment Internal SSL Certificates?
That's a great suggestion - thanks (+1)! If I did that - if I set up my own private CA and asked my frontend servers to trust it, would my end users' browsers trust it? Or would they still get the nasty warning messages?
Jul
2
asked Internal SSL Certificates?