Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
5
Newest
 Supporter
Impact
~999 people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Jul
28
revised Pronounceable Password Generator
added 62 characters in body
Jul
28
answered Pronounceable Password Generator
Jul
26
accepted Multiple OpenPGP encryption keys signed by a single certificatation key?
Jul
26
comment Multiple OpenPGP encryption keys signed by a single certificatation key?
I just read your linked answer. What exactly do you mean by cross-signing? a) personal key signs company key and vice versa (no master key used), or b) master key signs personal key and company key and personal+company key sign master key?
Jul
26
comment Multiple OpenPGP encryption keys signed by a single certificatation key?
Isn't it very risky to use one encryption key on all devices, even unsafe ones. If the encryption key gets stolen on the company computer, your (old) personal conversation can also be decrypted.
Jul
26
comment Multiple OpenPGP encryption keys signed by a single certificatation key?
So, cross-certifying should do the trick?
Jul
26
comment Multiple OpenPGP encryption keys signed by a single certificatation key?
Okay, "ultimate" trust is too much, but if I just use "trusted" isn't that pretty much what the WoT is there for: if they trust my master identity, they also trust my other identities?
Jul
26
revised Multiple OpenPGP encryption keys signed by a single certificatation key?
added 27 characters in body
Jul
25
awarded  Supporter
Jul
25
asked Multiple OpenPGP encryption keys signed by a single certificatation key?
Jul
25
awarded  Scholar
Jul
25
accepted How to guarantee that password is hashed on server-side?
Jan
13
awarded  Nice Question
Dec
7
comment How to guarantee that password is hashed on server-side?
"You could give the server your public key, and have it verify who you are by encrypting a nonce with the private key. You can use SSL for this, with client certificates." interesting. Is this actually used at authentication for webservices and how can I verify this scheme? But I assume this can't be done when on-the-go as you don't have acces to the private key.
Dec
7
comment How to guarantee that password is hashed on server-side?
"require your providers to hash passwords, and include penalty clauses." this unrealistic for free services
Dec
7
comment How to guarantee that password is hashed on server-side?
"simply use a password manager with a generated password": what if you're on the go? "checking the password recovery method" thx for tip :) a black-list of sites would be nice
Dec
7
revised How to guarantee that password is hashed on server-side?
added 94 characters in body
Dec
7
awarded  Editor
Dec
7
comment How to guarantee that password is hashed on server-side?
yes, I know, but I think it's simply an unrealistic requirement to remember a password for all the 100 sites you're registered on. password store? okay, but what if you're on the go. use your in-the-head hasing, like adding the domain? okay, but actually insecure as the pattern can easily be uncovered.
Dec
7
revised How to guarantee that password is hashed on server-side?
actual situation