244 reputation
111
bio website indolering.com
location Seattle, WA
age 29
visits member for 2 years, 9 months
seen 4 hours ago

2d
revised Why does DNSSEC have a ridiculous keysigning ceremony?
Updated based on information from an authoritative source.
Dec
6
revised Calculating D-Wave's integer factorization capabilties
No BS comments
Dec
6
comment Calculating D-Wave's integer factorization capabilties
@Mark The smart money is that D-Wave is pulling off quantum computation, however, debates on D-Wave's general quantum-ness are off-topic (i.e. stating that the "chain length" issue is of a concern is on topic, saying it's "debatable" is not).
Dec
6
revised Calculating D-Wave's integer factorization capabilties
Added link to comment about integer factorization
Dec
6
accepted Why does DNSSEC have a ridiculous keysigning ceremony?
Dec
6
answered Why does DNSSEC have a ridiculous keysigning ceremony?
Dec
6
asked Calculating D-Wave's integer factorization capabilties
Jul
2
awarded  Curious
Jun
11
revised Why has Convergence stalled out?
added 1 character in body
Jun
11
comment Why has Convergence stalled out?
@RoryAlsop I'm surprised you find this off-topic, a similar question regarding interpolique went over quite well both on stack exchange and here: security.stackexchange.com/questions/12512/…
Jun
10
comment Why has Convergence stalled out?
It would enable us to use self-signed certs everywhere (ending simple dragnet surveillance) and it makes MITM much harder.
Jun
10
asked Why has Convergence stalled out?
Apr
23
comment Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
@JaySheth Wile I do agree the current cert auth scheme is horribly broken, your proposal would only have helped here if the JS-level encryption happened at a different server. If you are applying the encryption at the same machine, you are screwed. At some point, you should just invest in some hardware security modules. That would move the encryption signing to a place where software bugs couldn't expose the keys.
Apr
17
revised Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Specified a few things.
Apr
16
answered Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Apr
15
awarded  Critic
Apr
2
revised FIDO, U2F Compatibility
Added explanation regarding FIDO
Apr
1
asked FIDO, U2F Compatibility
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
I believe that the refresh can only protect against failures which may have occurred during the last key signing. If the integrity of the key is compromised outside of the key ceremony, it means the equipment itself has been compromised. My proposal focuses makes any "auditing" of the equipment continuous. Perhaps there is something in that god-awful spec you linked to, I'll go digging : )
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
Thanks for the link, I will go over it when I can. However, note that ICANN does not bear the cost of these ceremonies, all of the key signers have to fly there on their own dime. If the box can run for 3 months without human intervention then it can run a full year without human intervention.