Reputation
Next tag badge:
97/100 score
25/20 answers
Badges
14 226 353
Newest
 Nice Answer
Impact
~4.4m people reached

Apr
23
awarded  Nice Answer
Apr
21
awarded  Enlightened
Apr
21
awarded  Nice Answer
Apr
21
answered FIPS Compliance with HMACSHA1 vs HMACSHA256 / HMACSHA512
Apr
21
awarded  Guru
Apr
19
awarded  Enlightened
Apr
18
awarded  Nice Answer
Apr
16
awarded  Good Answer
Apr
16
awarded  Nice Answer
Apr
15
awarded  Nice Answer
Apr
15
answered X windows security: VNC and X server vs xpra
Apr
15
answered What will I get if I “decrypt” a plaintext?
Apr
15
awarded  Good Answer
Apr
14
comment Can a SSL certificate have longer validity period than its parent in X.509 chain?
@cwyang: each pair may be valid only at dates that fall within the validity ranges of all involved certificates, so yes, some overlapping is needed. Considerable overlapping is common upon renewals, to give time for smooth transitions.
Apr
14
awarded  Nice Answer
Apr
14
answered What security impact is caused by a TLS server continuing the handshake when presented with an invalid SNI?
Apr
14
comment Can a SSL certificate have longer validity period than its parent in X.509 chain?
@MikeOunsworth: yes -- that's what Peter Gutmann calls "pointwise checking".
Apr
14
answered Can a SSL certificate have longer validity period than its parent in X.509 chain?
Apr
13
comment How can you spoof a TCP connection to a device that uses the same initial sequence number for each run of a TCP handshake?
If the server is willing to accept a TCP connection on a given port, then it will always send a SYN+ACK in response to a SYN, because that's exactly what it means to "accept a TCP connection". If the server does not listen to that port, then it won't respond with a SYN+ACK, but then the question is meaningless because without a connection, then there is no notion of "sequence number".
Apr
13
answered How can you spoof a TCP connection to a device that uses the same initial sequence number for each run of a TCP handshake?