59,754 reputation
470154
bio website
location
age 68
visits member for 2 years, 6 months
seen 1 hour ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Apr
12
awarded  http
Apr
11
comment Why don't more websites implement Perfect Forward Secrecy?
BEAST has been mitigated client-side in many ways, but some widely used "test your server" sites will award a "A+" mark only if your server enforces RC4 whenever possible. If you want to conclude that such test sites simply make problems worse... well, you would be right.
Apr
11
answered Which information does a whois lookup reveal about the registrant of the domain?
Apr
11
answered Does HTTPS retrieval, among its other effects, sign a document?
Apr
11
answered What causes an Operating System to become Corrupted?
Apr
11
comment What part of the browser is typically attacked?
The human user is the part which is most often compromised.
Apr
11
comment Firefox can import the .p12 format, but that contains a private key? Isnt this a security risk?
I have seen one bank distributing certificates to its clients, but that's still pretty rare. For a long time, certificate handling by browsers used very ugly popups, which did not help in making client certificates popular.
Apr
11
comment Firefox can import the .p12 format, but that contains a private key? Isnt this a security risk?
If you have a private key you can sign what you want, but if you want to play the role of a CA and issue certificates which are accepted by other people, then these other people must trust your public key in a CA role, which usually means that your public key is in a certificate, signed by another CA (that they trust), and, crucially, that certificate has the "is CA" mark in it (in the Basic Constraints extension, see the RFC). Existing commercial CA won't sell you such a certificate (or only for a wheelbarrow of money bills).
Apr
11
answered After heartbleed, how can you safely distribute new certs?
Apr
11
answered What is the point of certification authorities that are not trusted by browsers (=trusted by Root CAs)?
Apr
11
answered Firefox can import the .p12 format, but that contains a private key? Isnt this a security risk?
Apr
11
answered Why don't more websites implement Perfect Forward Secrecy?
Apr
11
answered Using client certificates for website authentication
Apr
11
answered SmartCard Key Extraction / Alternatives
Apr
11
answered How long does an HTTPS symmetric key last
Apr
10
answered Handling passwords in wicket
Apr
10
answered Where to find or purchase non-SSL certificates
Apr
10
answered Is it possible to stack encryption algorithms with SSL?
Apr
10
answered Is there an anti virus that protects processes from being injected code to?
Apr
10
answered Does Heartbleed vulnerability affect other libraries (like BouncyCastle, .NET's SslStream, etc.)?