147,621 reputation
24307504
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 10 months
seen 48 mins ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Aug
27
answered Are there any dangers in exposing git sha1 commit hashes?
Aug
27
answered Please help verify my understanding of Domain Validation (DV) SSL Certificate
Aug
26
answered Why do some passwords not allow certain types of characters?
Aug
26
comment Using HTTPS GET from app to server
Unfortunately, even if your application is no browser, attackers don't feel restrained that way. If they can convince a victim's browser to make a GET, they will. Where there is an "app", there is a platform which can run apps, and such platforms can also run Web browsers, and their authentication cookies can even be shared (which is your problem, really).
Aug
26
answered What are the alternative to PKI certificates in mesh networks?
Aug
26
answered how to view extension privileges in firefox
Aug
26
answered Using HTTPS GET from app to server
Aug
26
answered How signature validation would be checked on server side?
Aug
26
answered Diffie-Hellman and its TLS/SSL usage
Aug
25
awarded  Nice Answer
Aug
24
reviewed Approve suggested edit on State transition Analysis Technique
Aug
23
awarded  Nice Answer
Aug
23
reviewed Approve suggested edit on IP address of an iPhone
Aug
23
reviewed Approve suggested edit on How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
Aug
23
reviewed Approve suggested edit on 419 Nigerian scam problem
Aug
22
reviewed Approve suggested edit on SIEM log pre-filtering question
Aug
22
reviewed Approve suggested edit on Disable DES-CBC-SHA in schannel
Aug
22
reviewed Approve suggested edit on What is the risk of cross site scripting if I embed javascript into a website
Aug
22
awarded  Nice Answer
Aug
22
awarded  Nice Answer