3,248 reputation
516
bio website plokta.com
location Canterbury, United Kingdom
age 51
visits member for 4 years, 7 months
seen 5 hours ago

5h
comment Preventing installation of VPN software on home computers?
Prevented by whom, and for what purpose?
Jul
28
awarded  Good Answer
Jul
26
comment Random characters and letters form obsfuscation
How will you know that your "random" numbers and letters are really random? Javascript's Math.random() function only generates pseudo-random numbers, and their randomness (or lack of it) is implementation-specific and cannot be trusted.
Jul
24
comment What prevents a man in the middle from requesting a certificate for your server?
You should be able to create a DNS record or a new web page in a few minutes. If you can't, then that's your problem, and you won't get your certificate in a few minutes.
Jul
24
comment What prevents a man in the middle from requesting a certificate for your server?
@IlyaChernomordik The certificate providers check that you own the domain for which you want a certificate. They don't check whether it's a typo for another domain -- how could they? All domains are potentially typoes for other domains, and so if no certificate could be issued to a potential typo, then no certificates could be issued at all.
Jul
24
answered What prevents a man in the middle from requesting a certificate for your server?
Jul
24
answered Guessing the whole PBDKF2 output from 1 half
Jul
14
comment Is this RSA/AES combination good?
@AdrianSicaru The folks at StackExchange really need to add the ability to downvote comments, just so that we can downvote "We all are new to cryptography and creating our own crypto protocol seems like a good ideea". It's a really, really bad idea.
Jul
14
comment Electronic identity and digital signatures - why they are different?
You may want to carry your identifying key around with you, so that you can identify yourself when required, but keep your signing key at home where it's more secure, since the consequences of losing it are more serious. But if both keys are stored in the same card, I guess that wouldn't apply here.
Jul
7
comment Is it possible to use obtained wildcard certificate on more than one server?
Note that some certificate providers' contracts limit the number of servers on which the certificate can be used. It's a commercial limit not a technical limit, and the certificate will work, but you may be in breach of your contract. You need to read the small print.
Jul
7
comment How do I hide files inside an image without using any steganography tools?
Technically "cat" is a steganography tool here, because it's a tool that you're using for (very basic) steganography. So it's not actually a valid answer to the question (which is indeed unanswerable).
Jul
5
comment What countries have strong data protection laws?
The question was about data protection laws, not data retention laws.
Jul
1
awarded  Nice Answer
Jul
1
answered Is it neccessary that website certificate must have site URL?
Jun
9
answered Is it possible for an attacker to redirect a packet sent by a client, modify it then sent to original server
May
11
comment How are digital certificates compared?
If a virus has control of your computer, there's no such thing as a secure Java applet. It can install its own Java VM if it wants to. Once again, the only way to be secure is not to catch a virus.
May
11
comment How are digital certificates compared?
Getting a virus is a big problem, and completely compromises everything you do on your computer. The possibility that a virus could install a fake root certificate isn't a big problem, because everything you do is already compromised, and so the fake root certificate doesn't add to your problems.
May
11
answered How are digital certificates compared?
Apr
18
answered Do search engines give searcher's IP address to sites that come up in search?
Apr
13
comment Is the lack of an IP address in the AN field of an SSL certificate a vulnerability?
@SonnyOrdell There is no real-world use case for accessing a TLS/SSL site by IP address, except possibly security testing.