264 reputation
112
bio website indolering.com
location Seattle, WA
age 29
visits member for 3 years
seen Mar 25 at 22:31

Jan
30
comment FIDO, U2F Compatibility
@SaqibAli yes and no. Yubikey chose to deterministically generate the public/private keys, meaning that it can support an unlimited number of keys but older tokens won't work. In order to use the NFC ring or the implant, I'm guessing that you would have to build your own middleware layer.
Jan
14
awarded  Popular Question
Dec
15
revised Why does DNSSEC have a ridiculous keysigning ceremony?
Updated based on information from an authoritative source.
Dec
6
revised Calculating D-Wave's integer factorization capabilties
No BS comments
Dec
6
comment Calculating D-Wave's integer factorization capabilties
@Mark The smart money is that D-Wave is pulling off quantum computation, however, debates on D-Wave's general quantum-ness are off-topic (i.e. stating that the "chain length" issue is of a concern is on topic, saying it's "debatable" is not).
Dec
6
revised Calculating D-Wave's integer factorization capabilties
Added link to comment about integer factorization
Dec
6
accepted Why does DNSSEC have a ridiculous keysigning ceremony?
Dec
6
answered Why does DNSSEC have a ridiculous keysigning ceremony?
Dec
6
asked Calculating D-Wave's integer factorization capabilties
Jul
2
awarded  Curious
Jun
11
revised Why has Convergence stalled out?
added 1 character in body
Jun
11
comment Why has Convergence stalled out?
@RoryAlsop I'm surprised you find this off-topic, a similar question regarding interpolique went over quite well both on stack exchange and here: security.stackexchange.com/questions/12512/…
Jun
10
comment Why has Convergence stalled out?
It would enable us to use self-signed certs everywhere (ending simple dragnet surveillance) and it makes MITM much harder.
Jun
10
asked Why has Convergence stalled out?
Apr
23
comment Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
@JaySheth Wile I do agree the current cert auth scheme is horribly broken, your proposal would only have helped here if the JS-level encryption happened at a different server. If you are applying the encryption at the same machine, you are screwed. At some point, you should just invest in some hardware security modules. That would move the encryption signing to a place where software bugs couldn't expose the keys.
Apr
17
revised Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Specified a few things.
Apr
16
answered Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Apr
15
awarded  Critic
Apr
2
revised FIDO, U2F Compatibility
Added explanation regarding FIDO
Apr
1
asked FIDO, U2F Compatibility