59,984 reputation
471154
bio website
location
age 68
visits member for 2 years, 6 months
seen 8 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Apr
8
awarded  pgp
Apr
7
awarded  Nice Answer
Apr
7
comment Are SSL encrypted communications through a company network safe?
The point of SSL is to keep outsiders out, yes.
Apr
7
answered Are SSL encrypted communications through a company network safe?
Apr
7
answered Deleting undeletable files on a hacked Linux machine
Apr
7
answered Can you listen to your last GSM call recorded when calling back a user?
Apr
7
answered What was so dangerous about PGP that its creator was charged in court for it?
Apr
7
answered Why did Java (JRE) vulnerabilities peak in 2012-2013?
Apr
7
answered Can a smart card with PKI certificate be used to protect a document?
Apr
7
answered What version of TLS does any web browser use when connecting to server where all SSL Protocols are enabled?
Apr
6
awarded  Nice Answer
Apr
4
answered When you buy a certificate, does the certificate authority have (a copy of) the private key?
Apr
4
answered Is using MD5 in NTLMv2 protocol to store Windows passwords is secure?
Apr
4
comment Is the Station-to-Station protocol secure?
"Signature public key" = "public key fit for use in a signature algorithm". E.g. DSA, ECDSA... such public keys do not necessarily support asymmetric encryption or key exchange. It so happens that the most used asymmetric encryption algorithm (RSA) and the most used signature algorithm (RSA) share the same kind of key, allowing a "RSA key" to be used for both usages (although you do not necessarily want to), but that's not the general case for all algorithms cryptographers have come up with.
Apr
4
comment Is the Station-to-Station protocol secure?
They know each other signature public keys. A public key is not necessarily fit for asymmetric encryption. Moreover, using a new DH key pair on-the-fly grants forward secrecy.
Apr
4
answered Is the Station-to-Station protocol secure?
Apr
4
answered Certificate extensions - specific constraints
Apr
4
comment How many bits of entropy should I aim at for my password?
Personally I am using a passwords.txt file, and/or my brain, both of which working well. As far as I know, KeePass offers automatic entry in Web-based forms as an optional feature, but can also store and show passwords "generically".
Apr
4
answered Active Directory - Certificate Based Authentication - Multiple certificates for user
Apr
4
answered How many bits of entropy should I aim at for my password?