20,174 reputation
454102
bio website faiumoni.de/de/start.html
location Germany, Europe
age 34
visits member for 4 years, 8 months
seen Aug 9 at 11:18

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Aug
3
awarded  Guru
Jun
19
awarded  Good Answer
Jun
18
awarded  Nice Answer
Jun
17
awarded  Great Answer
May
27
awarded  Nice Answer
May
23
comment Why is there no Domain CA?
@pacerier www.startssl.com to name the one, I use.
May
22
comment Why is there no Domain CA?
@pacerier all CAs only offer certificates that are limited in time before they need to be renewd. There is no difference in principle between free and paid certificates. Except that I am only aware of free certificates that need to be renewed after one year but the are paid certificates that are valid for up to 5 years.
Mar
26
awarded  Guru
Mar
19
awarded  Enlightened
Mar
19
awarded  Nice Answer
Jan
29
awarded  Good Answer
Dec
17
comment Asymmetric vs Symmetric Encryption
Symmetric crypto does depend on the secure exchange of keys. My point is this: Assuming you have such a secure channel, you can use it to exchange public keys as well. Asymmetric crypto does add additional possibilities by involving trusted third parties, but you do not need to use third parties. Other advantages still apply: e.g., You can sign messages to protect them against modifications. You can just pick your private key to decrypt any message sent to you without having to look for the right key. Disclosing public keys is not an issue...
Dec
17
awarded  tls
Dec
15
reviewed Leave Open Trace facebook user ip. Is it even possible?
Dec
15
reviewed Reviewed Asymmetric vs Symmetric Encryption
Dec
15
comment Asymmetric vs Symmetric Encryption
If you have a secure channel to share symmetric keys, you can also use that to share public keys. Public/private key crypto adds the additional possibility to attach information about the owner to a public key and let trusted party sign this information.
Dec
15
comment When generating CSRF token
I think your summary is accurate.
Dec
15
reviewed Leave Open How to create secure portable firefox?
Dec
15
reviewed Leave Open Ongoing DDoS: What is the next step after being able to handle it?
Dec
15
comment Using my own encryption instead of https in app
There are certification authorities which offer simple server certificates free of charge. Startssl ist trusted by all major browsers.