689 reputation
724
bio website
location
age
visits member for 2 years, 11 months
seen Nov 12 at 23:45

Oct
16
awarded  Nice Question
Oct
6
comment Know certificate signing algorithm of a remote site using OpenSSL
yes, it prints the certificates, but how can I know the algorithm ?
Oct
6
asked Know certificate signing algorithm of a remote site using OpenSSL
Sep
29
comment ShellShock vulnerability and Java Web Applications
Thanks for link, but this is not what I was asking for.. i was more interested in knowing if a webapp be exploited.
Sep
29
comment ShellShock vulnerability and Java Web Applications
Uwe : I am not running any shell commands through my Java application. As I mentioned its Spring 3.2 based. It is a user management website. Ofcourse I get the user agent, IP and other browser data, and pass it to down stream applications.
Sep
29
asked ShellShock vulnerability and Java Web Applications
Jul
2
awarded  Curious
Jun
13
awarded  Notable Question
May
30
awarded  Notable Question
May
6
asked RC4-MD5 vs DES-CBC3-SHA
May
5
revised How safe is Apache's Commons StringEscapeUtils.escapeXml function to prevent XSS
deleted 37 characters in body; edited title
May
5
asked How safe is Apache's Commons StringEscapeUtils.escapeXml function to prevent XSS
Apr
26
comment Encryption and Decryption in stateless manner
Thomas, the downside for using one key for everybody would be that if attacker gets to know, it would compromise the entire user base ?
Apr
25
asked Avoiding SSL handshake for each call
Apr
25
asked Encryption and Decryption in stateless manner
Apr
3
awarded  Notable Question
Mar
11
accepted Increasing tomcat session id increases security
Mar
11
asked Increasing tomcat session id increases security
Mar
9
accepted Should Access-Control-Allow-Origin need to be domain specific
Mar
8
awarded  Nice Question