93,299 reputation
10134257
bio website
location
age 69
visits member for 3 years, 8 months
seen 13 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


May
12
awarded  Nice Answer
May
12
answered Ensure that a file can only be decrypted after a specific date
May
12
answered How does SSL/TLS PKI work?
May
11
awarded  Nice Answer
May
11
comment How are digital certificates compared?
If the virus injects an attacker-controlled CA inside the set of root CA that the Java VM uses to decide whether an applet is trustworthy, then the attacker may feed you with a fake, corrupted applet that your computer will execute blissfully. My point, though, is that a virus that can do that is also able to simply alter the Java VM or browser code right away, to get a copy of your password as you type it, and send it to its master. The latter method does not even need the attacker to send you a fake Java VM, so it is even simpler for the attacker.
May
11
answered How are digital certificates compared?
May
9
comment How long does an HTTPS symmetric key last
The key would be renewed exactly as often as the client and server wish it -- i.e., in practice, only when either the client or the server reboots. Which is not a problem, cryptographically speaking (encryption keys are not "used up" until a substantial amount of data has been processed with that key, where "substantial" means "250 billions of gigabytes" when AES is used).
May
3
awarded  Nice Answer
May
2
awarded  Nice Answer
May
1
answered Is TLS 1.0 more secure than TLS 1.2?
Apr
29
awarded  Nice Answer
Apr
25
awarded  Nice Answer
Apr
24
revised Please critique my encryption scheme for a very small microcontroller
deleted 1 character in body
Apr
24
answered Please critique my encryption scheme for a very small microcontroller
Apr
24
awarded  Nice Answer
Apr
24
answered Sharing a common public and private SSH keys for a cluster of machines
Apr
24
comment Custom socket server on the internet running as root
"Principle of least privilege" is worth anything only as long as there is some actual difference in the available privileges. My point is that the difference between "root" and "non-root" is usually negligible with today's systems -- it mattered a lot when attackers and victims shared the same hardware and OS instance, and "root" was basically a god; but no longer for separate machines, as in your case.
Apr
23
answered Custom socket server on the internet running as root
Apr
23
answered Why do HTTPS requests include the host name in clear text?
Apr
23
answered Understanding Certificate Pinning