1,974 reputation
316
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 8 months
seen yesterday

"I like turtles"


Jul
17
comment Are there any reasons for using SSL over IPSec?
The end of the article talks about why you would want to setup both an SSL VPN and an IPSec VPN. It doesn't talk about when you would use both at the same time. I think (though I could be wrong) that the OP is looking for use cases where you would use both IPSec and SSL at the same time.
Jul
17
revised Are there any reasons for using SSL over IPSec?
moved link and made it an actual link
Jul
17
comment Are there any reasons for using SSL over IPSec?
I'm not sure this is what the OP is looking for. He asks about using IPSec and SSL at the same time. This article is about using an IPSec VPN vs SSL VPN.
Jul
17
suggested suggested edit on Are there any reasons for using SSL over IPSec?
Jul
17
comment Are there any reasons for using SSL over IPSec?
Well technically from the first country to your home the connection would be encrypted with IPSec and SSL. When it reaches your home country, IPSec is removed and only SSL remains.
Jul
17
awarded  Revival
Jul
17
comment Are there any reasons for using SSL over IPSec?
Sure. Say I am in a different country and don't want my internet traffic snooped on. I can use IPSec to tunnel the internet traffic back to a server in my home country. Once that traffic leaves that server in my home country it will no longer be encrypted. So I use SSL to connect to, for example, a web mail server.
Jul
10
comment Could remailers achieve their goals under conditions of ubiquitous (total) surveillance?
I don't see what this has to do with cryptography. Care to explain? Remember, this site is very specifically geared towards cryptography.
Jun
24
comment Crack Unknown Encryption
@SQB I'm a mod on crypto. This sort of question would be off-topic there. We don't accept request to analyze or decrypt data for someone.
Jun
24
comment Crack Unknown Encryption
Your options are captured by this comic. Personally I would choose the one on the right. You know where your friend lives, right?
Jun
24
comment Store a password to avoid user interaction
AFAIK, DPAPI does not lock "down to either the user or application" unless you consider the use of optional entropy as locking a blob down to the application. The DataProtectionScope options are CurrentUser or LocalMachine. If additional entropy is used and that entropy is known only by the application, then you could consider the blob tied only to the application (until the application is reverse engineered).
Jun
24
answered What should I do when I need to store passwords for usage in 3rd party software?
Jun
19
revised PGP and S-MIME What is web of trust?
fixed misspelling in title
Jun
19
suggested suggested edit on PGP and S-MIME What is web of trust?
Jun
17
accepted What security does nginx provide between server blocks?
Jun
17
comment What security does nginx provide between server blocks?
What user do you run the workers as? If they are running as appname:www-data and static files are readable by www-data group, then someone who exploited the worker process would in one server block could read the files from the other block, right?
Jun
17
comment What security does nginx provide between server blocks?
Right now I'm using tcp sockets for php-fpm. I would have to switch to unix sockets for this to work, right? (not a big deal, just want to make sure).
Jun
17
comment What security does nginx provide between server blocks?
+1 that is a good idea. The apps of interest are PHP and I'm running PHP-fpm. So I should be able to run two different php-fpm pools (as different users) like PHP-FPM Tip #3 here
Jun
17
asked What security does nginx provide between server blocks?
Jun
2
comment Why is it difficult to break RSA?
@Cemre, no, private key is d where ed=1 mod phi(N). Computing phi(N) given only N is equivalent to factoring.