60,614 reputation
475155
bio website
location
age 68
visits member for 2 years, 6 months
seen 10 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Apr
9
answered Heartbleed - Blown out of proportion?
Apr
9
awarded  Nice Answer
Apr
9
answered Should I change all my passwords due to heartbleed
Apr
9
answered Does the Heartbeat Openssl Bug also affect Servers who enforce Client Authentication?
Apr
9
answered Trusted Certificate Authorities - how do they work?
Apr
9
answered How can I know when a certificate was created?
Apr
9
comment Why does TLS need an explicit heartbeat protocol?
Instead of sending a SSL record with n bytes of data, a client or server sends two records, the first one containing 1 byte, the second containing the remaining n-1 bytes. This allows for some "randomization" of the IV for CBC encryption, which defeats BEAST. Theoretically, a 0/n split would have worked, but at least IE 6.0 crashed on a zero-length record.
Apr
9
answered Hash function with configurable length
Apr
9
answered Why does TLS need an explicit heartbeat protocol?
Apr
8
awarded  Good Answer
Apr
8
answered Can Heartbleed be used to obtain memory from other processes?
Apr
8
answered Are networks using EAP-TLS affected by Heartbleed?
Apr
8
comment What was so dangerous about PGP that its creator was charged in court for it?
Maybe not exactly the same time. PGP is from the early 1990s, not the 1960s. Yet the legal details mattered: Zimmerman managed to legally export his code by printing it as a book (I have seen it: source code in a big, clear monospace font, and a big "scan this book" banner on the cover).
Apr
8
awarded  Nice Answer
Apr
8
awarded  java
Apr
8
awarded  pgp
Apr
7
awarded  Nice Answer
Apr
7
comment Are SSL encrypted communications through a company network safe?
The point of SSL is to keep outsiders out, yes.
Apr
7
answered Are SSL encrypted communications through a company network safe?
Apr
7
answered How do I deal with a compromised server?