221 reputation
111
bio website indolering.com
location Seattle, WA
age 29
visits member for 2 years, 4 months
seen Jul 4 at 21:01

Jul
2
awarded  Curious
Jun
11
revised Why has Convergence stalled out?
added 1 character in body
Jun
11
comment Why has Convergence stalled out?
@RoryAlsop I'm surprised you find this off-topic, a similar question regarding interpolique went over quite well both on stack exchange and here: security.stackexchange.com/questions/12512/…
Jun
10
comment Why has Convergence stalled out?
It would enable us to use self-signed certs everywhere (ending simple dragnet surveillance) and it makes MITM much harder.
Jun
10
asked Why has Convergence stalled out?
Apr
23
comment Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
@JaySheth Wile I do agree the current cert auth scheme is horribly broken, your proposal would only have helped here if the JS-level encryption happened at a different server. If you are applying the encryption at the same machine, you are screwed. At some point, you should just invest in some hardware security modules. That would move the encryption signing to a place where software bugs couldn't expose the keys.
Apr
17
revised Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Specified a few things.
Apr
16
answered Would usage of jCryption 3.0 + SSL have mitigated the Heartbleed vulnerability?
Apr
15
awarded  Critic
Apr
2
revised FIDO, U2F Compatibility
Added explanation regarding FIDO
Apr
1
asked FIDO, U2F Compatibility
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
I believe that the refresh can only protect against failures which may have occurred during the last key signing. If the integrity of the key is compromised outside of the key ceremony, it means the equipment itself has been compromised. My proposal focuses makes any "auditing" of the equipment continuous. Perhaps there is something in that god-awful spec you linked to, I'll go digging : )
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
Thanks for the link, I will go over it when I can. However, note that ICANN does not bear the cost of these ceremonies, all of the key signers have to fly there on their own dime. If the box can run for 3 months without human intervention then it can run a full year without human intervention.
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
They have an M-of-N system here and you could test the integrity of their keys and the system every three months without creating a new signing key.
Mar
4
awarded  Yearling
Mar
4
awarded  Nice Question
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body
Mar
4
comment Why does DNSSEC have a ridiculous keysigning ceremony?
I would like to add that's it's entirely feasible to build a tamper-proof server. You could, for example, just monitor the electrical resistance of the case and set off some thermite if it changes.
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body
Mar
4
revised Why does DNSSEC have a ridiculous keysigning ceremony?
added 286 characters in body