211 reputation
110
bio website indolering.com
location Seattle, WA
age 28
visits member for 2 years, 1 month
seen 2 hours ago

2h
revised Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Specified a few things.
1d
answered Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
2d
awarded  Critic
Apr
2
revised FIDO, U2F Compatibility
Added explanation regarding FIDO
Apr
1
asked FIDO, U2F Compatibility
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
I believe that the refresh can only protect against failures which may have occurred during the last key signing. If the integrity of the key is compromised outside of the key ceremony, it means the equipment itself has been compromised. My proposal focuses makes any "auditing" of the equipment continuous. Perhaps there is something in that god-awful spec you linked to, I'll go digging : )
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
Thanks for the link, I will go over it when I can. However, note that ICANN does not bear the cost of these ceremonies, all of the key signers have to fly there on their own dime. If the box can run for 3 months without human intervention then it can run a full year without human intervention.
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
They have an M-of-N system here and you could test the integrity of their keys and the system every three months without creating a new signing key.
Mar
4
awarded  Yearling
Mar
4
awarded  Nice Question
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
I would like to add that's it's entirely feasible to build a tamper-proof server. You could, for example, just monitor the electrical resistance of the case and set off some thermite if it changes.
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body
Mar
4
asked Why does DNSSEC have a ridiculous keysigning ceremony?
Nov
7
accepted Tracing security policy permissions in JavaScript
Nov
7
comment Tracing security policy permissions in JavaScript
Thanks for pointing that out Silverlight. I think there was a communication error in a later exchange.
Nov
6
comment Tracing security policy permissions in JavaScript
I know about postMessage, but I was told that this was possible. Is this only any issue for parent->child or is child->parent manipulation possible?
Nov
4
asked Tracing security policy permissions in JavaScript
Sep
13
revised Child iFrame hash verification of parent iFrame content
Rewrote to answer question more directly