Reputation
Next tag badge:
117/100 score
19/20 answers
Badges
13 156 276
Newest
 Good Answer
Impact
~3.1m people reached

1d
awarded  Good Answer
1d
awarded  Guru
2d
awarded  Good Answer
Aug
20
awarded  Necromancer
Aug
19
awarded  Enlightened
Aug
19
awarded  Nice Answer
Aug
11
awarded  key-management
Aug
9
awarded  Enlightened
Aug
9
awarded  Nice Answer
Aug
7
answered Is a large encrypted file more secure than a small one?
Aug
7
comment Is HttpUtility.HtmlAttributeEncode considered for single-quotes attributes?
I think that the statement refers to the idea that they always intended the method to be used only for double-quoted arguments, but they added the escape for apostrophes nonetheless to help the poor sods that do not read documentation. They still don't want to claim support for single-quoted attributes, even though they kind-of added it surreptitiously. If you want to escape apostrophes explicitly, you can always do a String.Replace().
Aug
7
answered Is HttpUtility.HtmlAttributeEncode considered for single-quotes attributes?
Aug
7
awarded  Good Answer
Aug
6
awarded  Great Answer
Aug
5
answered Received email at work from someone using a member's name
Aug
5
answered TLS handshake encrypted alert on client certificate
Aug
5
comment What are requirements for HMAC secret key?
Let's be precise: with SHA-256, the output size is 256 bits, but the block size is 512 bits, so the "shortening" occurs only for keys of more than 512 bits. However, cryptographic keys (for symmetric algorithms like HMAC) longer than 128 bits don't really add security, so there is no actual need to go to a full block-length key.
Aug
4
awarded  Necromancer
Aug
4
comment Why is using SSH key more secure than using passwords?
In SSH, client keys are not server-specific (usually). A given user has one public/private key pair, and uses it to connect to several servers. The problem I am talking about here is whether compromising one server indirectly yields access to all other servers to which the user is authorized to connect -- and the answer is no, because of the way client keys are used in SSH.
Aug
4
awarded  Guru