Reputation
233
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 7
Newest
 Yearling
Impact
~3k people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Aug
9
awarded  Yearling
Aug
8
asked Why does Android use SELinux?
Jul
25
asked How does an android device/os prevent me from getting root?
Jul
24
accepted Where are the HTTPS session resumption tickets/sessionIds stored on the client?
Jul
24
comment Where are the HTTPS session resumption tickets/sessionIds stored on the client?
Never mind. The master secret cannot/should not be written to disk anyway and so storing the session ticket does not make any sense and there are bunch of reasons to not do this. So I don't expect it to be.
Jul
24
comment Where are the HTTPS session resumption tickets/sessionIds stored on the client?
Thanks. I understand the session resumption from the server point of view but I am not clear on how long its going to be persisted on the client. Is the session resumption information ever persisted to disk? Specifically in the browser context.
Jul
24
comment Where are the HTTPS session resumption tickets/sessionIds stored on the client?
Ah ok. That is what I was hoping to hear. Is it ever persisted to disk on the client?
Jul
24
asked Where are the HTTPS session resumption tickets/sessionIds stored on the client?
Jun
24
asked Does WebCrypto also mandate the crypto algorithms be implemented in Javascript?
May
18
asked How to manage a custom session in a webapp?
Nov
20
accepted How do chips with write only functionality that store keys work?
Nov
5
asked How do chips with write only functionality that store keys work?
Sep
11
asked Understanding cross origing requests from a web page
Sep
10
awarded  Critic
Sep
9
awarded  Commentator
Sep
9
comment Vulnerability exploitation in Java
So much I guessed. So how are exploits done in Java?
Sep
9
asked Vulnerability exploitation in Java
Sep
9
awarded  Curious
Sep
8
asked Loading code securely in the Trusted Execution Environment (ARM)
Aug
13
comment How are HSMs used in payment processing on the server?
Understood. But what is the actual usage of HSMs in a payment processing stack? Please ignore the example I gave in my question about decrypting card details. Can you tell me how exactly HSMs are used in the payment space?