User tylerl

415 votes

Accepted

Why are salted hashes more secure for password storage?

answered Feb 21, 2014 at 5:11

404 votes

Accepted

"Diffie-Hellman Key Exchange" in plain English

answered Nov 24, 2013 at 7:28

268 votes

Accepted

What is certificate pinning?

answered Jan 31, 2013 at 1:23

239 votes

Accepted

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

answered Aug 5, 2013 at 5:52

237 votes

Accepted

What is a good analogy to explain to a layman why passwords should be hashed?

answered Jul 18, 2014 at 16:56

194 votes

Is Google spying on all of us?

answered Nov 26, 2012 at 5:49

179 votes

Accepted

Where to store a server side encryption key?

answered Mar 1, 2012 at 18:40

171 votes

Is Google overreaching by forcing me to use TLS?

answered Mar 25, 2014 at 20:35

151 votes

Accepted

What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'

answered Mar 6, 2014 at 17:12

149 votes

Is "password knocking" a good idea?

answered Feb 19, 2015 at 8:31

141 votes

Accepted

What prevents me from buying a SSL certificate for a domain I don't control?

answered Feb 24, 2016 at 5:52

117 votes

Accepted

Bad practice to have a "god" password?

answered Feb 7, 2014 at 18:02

110 votes

Accepted

How secure is Ubuntu's default full-disk encryption?

answered Jul 22, 2013 at 5:41

93 votes

Accepted

How secure are the FIDO U2F tokens

answered Oct 27, 2014 at 6:55

82 votes

Can my mouse have virus and infect other machines?

answered Sep 21, 2015 at 5:15

81 votes

Two-Step vs. Two-Factor Authentication - Is there a difference?

answered Sep 7, 2013 at 17:12

79 votes

What makes it illegal to use the information learned by exploiting a bug?

answered Apr 17, 2014 at 20:41

72 votes

Accepted

Does the average user really need a password manager?

answered Nov 6, 2013 at 21:51

70 votes

Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?

answered Aug 20, 2013 at 1:52

69 votes

Accepted

Is all data sent over SSH encrypted?

answered May 22, 2014 at 6:54

68 votes

Is it bad practice to use your real name online?

answered Dec 6, 2013 at 22:44

65 votes

Why shouldn't we roll our own?

answered Sep 21, 2012 at 17:39

62 votes

What is the purpose of "gibberish" comments posted to my blog?

answered Apr 29, 2014 at 15:59

60 votes

Is using SHA-512 for storing passwords tolerable?

answered Feb 22, 2014 at 20:43

58 votes

Accepted

Should websites be allowed to disable autocomplete on forms or fields?

answered Feb 20, 2014 at 1:39

58 votes

Accepted

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

answered Jan 20, 2013 at 21:58

57 votes

Are two firewalls better than one?

answered Jul 1, 2014 at 16:49

55 votes

How do you deal with massive port scans?

answered Feb 9, 2016 at 8:13

53 votes

Accepted

Can a lock picker slowly undermine the security of a deadbolt door?

answered Nov 26, 2014 at 3:25

51 votes

If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?

answered Nov 20, 2013 at 8:20

Stack Exchange Network

672 Answers

Why are salted hashes more secure for password storage?

"Diffie-Hellman Key Exchange" in plain English

What is certificate pinning?

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

What is a good analogy to explain to a layman why passwords should be hashed?

Is Google spying on all of us?

Where to store a server side encryption key?

Is Google overreaching by forcing me to use TLS?

What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'

Is "password knocking" a good idea?

What prevents me from buying a SSL certificate for a domain I don't control?

Bad practice to have a "god" password?

How secure is Ubuntu's default full-disk encryption?

How secure are the FIDO U2F tokens

Can my mouse have virus and infect other machines?

Two-Step vs. Two-Factor Authentication - Is there a difference?

What makes it illegal to use the information learned by exploiting a bug?

Does the average user really need a password manager?

Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?

Is all data sent over SSH encrypted?

Is it bad practice to use your real name online?

Why shouldn't we roll our own?

What is the purpose of "gibberish" comments posted to my blog?

Is using SHA-512 for storing passwords tolerable?

Should websites be allowed to disable autocomplete on forms or fields?

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

Are two firewalls better than one?

How do you deal with massive port scans?

Can a lock picker slowly undermine the security of a deadbolt door?

If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?