770 reputation
314
bio website samwhited.com
location Atlanta, GA
age 24
visits member for 2 years, 11 months
seen 2 days ago

I am an actor, photographer, and software engineer living in Atlanta, GA.


2d
comment Why do we not trust an SSL certificate that expired recently?
@supercat I don't disagree, I just don't necessarily think this sort of system would help. The comments probably aren't the best place to discuss it though. Ping me on chat if you really want to continue this conversation.
Dec
18
comment Why do we not trust an SSL certificate that expired recently?
@supercat Sounds like overengineering for a problem that doesn't exist to me. If a company can't be bothered to renew their certs on time I doubt an early warning will do anything. It's essentially just pushing the expiration date forward (albeit with a soft fail instead of a hard fail).
Dec
17
comment Why do we not trust an SSL certificate that expired recently?
I still don't really understand the point of wanting to do this, but sure; you could maintain two CRL's and add something to OCSP. There's just no point to having a grace period or soft-fail period.
Dec
17
comment Why do we not trust an SSL certificate that expired recently?
@supercat No one would want to deal with the hassle, as you said, however, this is essentially the same as just showing a warning "This service uses an expired certificate" and letting the user click through. If the client is savvy enough to verify with a captcha or ignorant enough just to click through, they're savvy enough (or ignorant enough) to just hit the "okay, accept this cert even though it's expired" button.
Mar
26
revised Tor - chain of connected nodes?
Typo fix.
Mar
26
revised Tor - chain of connected nodes?
Fix answer to actually answer the question...
Mar
22
awarded  Excavator
Mar
22
revised Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
s/TOR/Tor/g and update DDG link as well as add a link to the blog post announcing the exit enclave and hidden service
Mar
22
suggested approved edit on Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Jan
12
awarded  Yearling
Apr
30
comment Do secure phone lines exist?
For an interesting example of this (using SIP) check out ostel.me, an implementation of the Open Secure Telephony Project (guardianproject.info/wiki/OSTN)
Apr
1
comment Using linux to combat windows flash drive malware?
Never assume they `should' know anything. That was the point of the users question (they didn't know).
Apr
1
awarded  Commentator
Apr
1
awarded  Critic
Apr
1
comment Using linux to combat windows flash drive malware?
What if they start the file with a `.'? Now it's also hidden on Unix and Unix-like operating systems.
Mar
25
reviewed Reviewed FireFox's restore previous session restores logins authenticated by server's sessions
Feb
27
awarded  Informed
Feb
26
reviewed No Action Needed How do I find a target on the wired network, from an attack system on Wi-Fi?
Feb
26
awarded  Analytical
Feb
26
awarded  Custodian