User Tobias Kienzler

172 votes

9 answers

242k views

Is Adblock (Plus) a security risk?

asked Feb 27, 2014 at 7:25

109 votes

5 answers

26k views

What kinds of encryption are _not_ breakable via Quantum Computers?

asked Jan 3, 2014 at 14:15

80 votes

3 answers

30k views

What is a good general purpose GnuPG key setup?

asked Feb 27, 2013 at 9:06

55 votes

2 answers

56k views

How does ssh public key authentication work?

asked Oct 26, 2012 at 11:22

44 votes

4 answers

46k views

How to set up OpenSSH to use x509 PKI for authentication?

asked Feb 6, 2013 at 16:45

37 votes

1 answer

30k views

Which properties of a X.509 certificate should be critical and which not?

asked Feb 15, 2013 at 17:01

20 votes

4 answers

2k views

How to treat non-optional bad security questions?

asked Jan 28, 2013 at 11:37

16 votes

2 answers

11k views

How to change (sub)key usage of a PGP key?

asked Feb 27, 2013 at 14:58

13 votes

4 answers

1k views

How to trust ICs?

asked Jan 13, 2014 at 8:49

13 votes

3 answers

1k views

Can signing too much compromise a private key?

asked Aug 7, 2012 at 10:15

12 votes

2 answers

9k views

How to use a Yubikey NEO (or any OpenPGP card or GnuPG in general) to sign X.509 CSRs?

asked Feb 18, 2013 at 17:05

12 votes

1 answer

2k views

Can all the (other) recepients of a PGP encrypted message be identified?

asked Oct 16, 2012 at 19:09

9 votes

2 answers

15k views

Which extensions to use for a S/MIME certificate?

asked Feb 1, 2013 at 10:40

9 votes

2 answers

1k views

Apart from the lack of native Outlook support, why should one prefer S/MIME over PGP/MIME for email?

asked Feb 6, 2013 at 7:36

8 votes

3 answers

1k views

Is piping a `ssh-agent` signed message as a password secure?

asked Oct 26, 2012 at 15:39

7 votes

2 answers

9k views

How safe is the ownCloud encryption in a trusted LAN?

asked Oct 15, 2012 at 12:35

7 votes

2 answers

4k views

How does Firefox securely store my SSL certificate?

asked Oct 16, 2012 at 8:40

6 votes

3 answers

6k views

Where does StartSSL generate the cerificate, server or client-side?

asked Oct 16, 2012 at 12:22

5 votes

2 answers

4k views

How to harden my Buffalo LinkStation Pro?

asked Sep 4, 2012 at 13:34

5 votes

2 answers

285 views

How to refuse delivering emails that are not signed by trusted PGP keys?

asked Sep 9, 2012 at 15:11

5 votes

2 answers

511 views

How to back up encrypted data over a VPN connection? The encrypted container, the data within or encrypted individual files?

asked Oct 3, 2012 at 11:32

4 votes

1 answer

6k views

What is the difference between `extendedKeyUsage` and an application policy?

asked Feb 12, 2013 at 14:38

4 votes

2 answers

376 views

Would re-salting passwords regularly in-/decrease security?

asked Oct 18, 2013 at 14:14

3 votes

1 answer

743 views

How to have Thunderbird include a root certificate?

asked Mar 1, 2013 at 13:29

3 votes

2 answers

157 views

How to best separate password "tiers" or not at all?

asked Nov 21, 2021 at 10:46

3 votes

2 answers

14k views

How to set up a user-friendly NAS encryption?

asked Sep 4, 2012 at 7:06

2 votes

1 answer

1k views

Does S/MIME provide means to propagate a certificate's revocation?

asked Feb 8, 2013 at 16:03

2 votes

1 answer

427 views

Is the `ssh-agent`'s DSA signature deterministic?

asked Oct 29, 2012 at 10:48

1 vote

1 answer

1k views

How to troubleshoot why Thunderbird rejects a PKCS#12 certificate with "Could not verify this certificate for unknown reasons"?

asked Feb 15, 2013 at 16:49

1 vote

3 answers

1k views

Should I use a Firefox master password or NTFS encrypt my profile?

asked Oct 16, 2012 at 13:11

Stack Exchange Network

34 Questions

Is Adblock (Plus) a security risk?

What kinds of encryption are _not_ breakable via Quantum Computers?

What is a good general purpose GnuPG key setup?

How does ssh public key authentication work?

How to set up OpenSSH to use x509 PKI for authentication?

Which properties of a X.509 certificate should be critical and which not?

How to treat non-optional bad security questions?

How to change (sub)key usage of a PGP key?

How to trust ICs?

Can signing too much compromise a private key?

How to use a Yubikey NEO (or any OpenPGP card or GnuPG in general) to sign X.509 CSRs?

Can all the (other) recepients of a PGP encrypted message be identified?

Which extensions to use for a S/MIME certificate?

Apart from the lack of native Outlook support, why should one prefer S/MIME over PGP/MIME for email?

Is piping a `ssh-agent` signed message as a password secure?

How safe is the ownCloud encryption in a trusted LAN?

How does Firefox securely store my SSL certificate?

Where does StartSSL generate the cerificate, server or client-side?

How to harden my Buffalo LinkStation Pro?

How to refuse delivering emails that are not signed by trusted PGP keys?

How to back up encrypted data over a VPN connection? The encrypted container, the data within or encrypted individual files?

What is the difference between `extendedKeyUsage` and an application policy?

Would re-salting passwords regularly in-/decrease security?

How to have Thunderbird include a root certificate?

How to best separate password "tiers" or not at all?

How to set up a user-friendly NAS encryption?

Does S/MIME provide means to propagate a certificate's revocation?

Is the `ssh-agent`'s DSA signature deterministic?

How to troubleshoot why Thunderbird rejects a PKCS#12 certificate with "Could not verify this certificate for unknown reasons"?

Should I use a Firefox master password or NTFS encrypt my profile?