125 reputation
3
bio website
location
age
visits member for 2 years, 9 months
seen Oct 6 at 2:51

Oct
5
accepted How are “Certificate Signing” key usage certificates restricted to what domains they can sign?
Oct
5
asked How are “Certificate Signing” key usage certificates restricted to what domains they can sign?
Sep
26
comment HTTPS self signed certficiate for personal website
Get a free certificate from StartSSL if you don't want the hassle of manually trusting your own certificate in every browser.
Jun
3
comment Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
Cisco supports 802.1X trunking with an AP as a supplicant with multiple SSIDs & VLANs right from their SMB 300 series switches and APs.
Jun
2
comment Are Web Views in android secure?
Typing your password into a WebView is the same as typing your password into an unknown app or website. The OAuth procedure to log into Google, Twitter etc. from an app is completely pointless as the app already stole your password when you typed it in. It has complete control over the WebView.
Jun
2
awarded  Scholar
Jun
2
accepted Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
Jun
2
comment Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
Also, this is just for a home lab. I am only interested in identifying solutions that are theoretically secure and that don't rely on physical security. If a device is physically compromised, the worst that could be done should be to have its settings erased and thus its saved credentials would be lost. My switch actually does support 802.1X on a trunk port as well as simultaneous VLAN assignment instead of trunking if the RADIUS server specifies the VLAN ID. I was eager to get this working with an AP that supports RADIUS based assignment on the same SSID.
Jun
2
comment Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
Theoretically it could work on a Linux client by manually running wpa_supplicant twice - First using the wireless driver to authenticate to the AP and once the interface is up, again using the wired driver to authenticate to the switch. Obviously this is not feasible for regular clients unless the OS itself "detects" that the second Ethernet layer authentication is required after connecting to the AP.
Mar
28
awarded  Student
Mar
27
awarded  Teacher
Mar
27
answered SSL is Extended Validation more secure?
Mar
27
asked Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
Feb
11
answered Does my UI need to be secure if my API is?
Dec
20
comment How can someone go off-web, and anonymise themselves after a life online?
Or like AACS where future messages cannot be decrypted by a blacklisted member.
Jun
7
comment What are the implications of NSA surveillance on the average internet user?
If you use the Internet wisely such as not allowing non-SSL traffic to a site at all then there is nothing they can learn about your activity on that site except when you visited the site.