Information Security

Nice Answer

 Nice Answer
Answer score of 10 or more. This badge can be awarded multiple times.

earned this badge 790 times.
When to use HMAC alongside AES?
Awarded May 9 '17 at 8:50
What are realistic rates for brute force hashing?
Awarded Apr 21 '17 at 20:50
What issues arise from sharing a SSL certificate's private key?
Awarded Apr 15 '17 at 18:36
Are documents truly “signed” by DocuSign?
Awarded Apr 12 '17 at 11:14
static vs dynamic vs challenge response
Awarded Apr 6 '17 at 23:58
Changing policy to allow USB drives. Why should I try to stop it?
Awarded Mar 22 '17 at 19:41
Surveillance: blocking laptop's microphone from spying on you?
Awarded Mar 22 '17 at 18:08
How can I allow access to encrypted data if only 2 out of 3 users provide a secret?
Awarded Mar 14 '17 at 17:10
Is CVE-2013-2566 a practical attack against RC4 or still conceptual?
Awarded Mar 10 '17 at 13:25
zero knowledge proof - where do we use it?
Awarded Mar 8 '17 at 21:28
Difference between authentication, integrity and data origin authentication
Awarded Mar 8 '17 at 16:17
Can a file contain its md5sum inside it?
Awarded Mar 7 '17 at 17:52
Unseen.is encryption claims revisited with their proprietary, patented “xAES” algorithm
Awarded Mar 6 '17 at 16:56
Does having a minimum number of digits improve password security?
Awarded Mar 1 '17 at 10:28
gpg --perfect-code
Awarded Feb 14 '17 at 0:18
What is the difference between SSL and X.509 Certificates?
Awarded Jan 12 '17 at 12:01
Converting ECC Private key to PKCS#1 format
Awarded Jan 9 '17 at 19:55
Why is it a good idea that X.509 digital certificates have an expiry date?
Awarded Jan 7 '17 at 3:18
Decryption on AES when the same key and IV are used
Awarded Dec 30 '16 at 11:59
What can one do when encryption methods fail?
Awarded Dec 27 '16 at 22:28
Is there any virus that can cause physical damage?
Awarded Dec 21 '16 at 13:07
OpenSSL, x509: what's the significance of CN (Common Name)?
Awarded Dec 21 '16 at 9:28
If most companies do not enable TLS for SMTP and IMAP, should we consider email not secure at all?
Awarded Dec 21 '16 at 8:22
Masking password when typing vs hiding input when typing
Awarded Dec 9 '16 at 0:25
Are the SS64.com password generators a good approach?
Awarded Dec 7 '16 at 17:52
What part of TLS specifies how to verify a certificate chain
Awarded Dec 5 '16 at 14:30
Are there any architectures currently out there that use hardware-enforced process isolation? What would it take to add that to x86?
Awarded Nov 25 '16 at 8:32
From a trust perspective, is renewing a CA certificate the same as trusting a sub-CA?
Awarded Nov 21 '16 at 0:13
Why does Firefox split HTTPS request?
Awarded Nov 20 '16 at 19:30
Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
Awarded Nov 17 '16 at 19:57
Why do I hear about so many Java insecurities? Are other languages more secure?
Awarded Nov 17 '16 at 12:45
https security - should password be hashed server-side or client-side?
Awarded Nov 4 '16 at 5:34
What are the security risks in enabling ipv6
Awarded Oct 31 '16 at 11:03
Do 64-bit applications have any security merits over 32-bit applications?
Awarded Oct 27 '16 at 1:57
GPG-encrypted mailing list and other approaches to safe communication
Awarded Oct 16 '16 at 8:05
Can an intermediate CA be trusted like a self-signed root CA?
Awarded Oct 1 '16 at 3:36
How safe is the ownCloud encryption in a trusted LAN?
Awarded Sep 30 '16 at 16:08
Best password strength checker
Awarded Sep 26 '16 at 18:39
SSL3 error when requesting connection using TLS 1.2
Awarded Sep 22 '16 at 19:29
Why does gpg use /dev/urandom
Awarded Sep 12 '16 at 16:46
Why improvising your own Hash function out of existing hash functions is so bad
Awarded Sep 9 '16 at 12:49
How would you store a 4 digit pin code securely in the database?
Awarded Sep 9 '16 at 3:40
Is 1password vulnerable to NSA spying?
Awarded Sep 8 '16 at 13:52
Is it possible to prove a certain email has been sent using a certain computer?
Awarded Sep 1 '16 at 1:45
What is the benefit with using encrypted RAM?
Awarded Aug 29 '16 at 1:15
Is there a method of generating site-specific passwords which can be executed in my own head?
Awarded Aug 23 '16 at 14:17
When do you use OpenID vs. OpenID Connect
Awarded Aug 17 '16 at 6:32
Validating an SSL certificate chain according to RFC 5280: Am I understanding this correctly?
Awarded Aug 12 '16 at 9:31
TLS at layer 4 BUT 802.1X EAP-TLS at layer 2?
Awarded Aug 10 '16 at 17:20
What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?
Awarded Aug 9 '16 at 7:13
Is decompiling software considered unethical or illegal?
Awarded Aug 5 '16 at 1:48
Using RSA-SHA as/instead HMAC in OpenVPN?
Awarded Aug 3 '16 at 20:26
Is Rfc2898DeriveBytes using HMAC SHA1 still considered “secure enough” for hashing passwords?
Awarded Aug 3 '16 at 13:51
How to protect against “padding oracle attacks.”
Awarded Jul 31 '16 at 15:03
What is a good general purpose GnuPG key setup?
Awarded Jul 26 '16 at 19:49
SSL handshake failure modes
Awarded Jul 24 '16 at 14:58
Should I use SSL/TLS renegotiation?
Awarded Jul 24 '16 at 2:36
Can I restrict a Certification Authority to signing certain domains only?
Awarded Jul 20 '16 at 3:22
Hash function change
Awarded Jul 18 '16 at 18:08
Why is the server returning 3 SYN + ACK packets during a SYN scan?
Awarded Jul 15 '16 at 15:12
1 2
3
4 5
…
14

Others with this badge