hildred
  • Member for 7 years, 10 months
  • Last seen more than a week ago
Should I revoke no longer used Let's Encrypt certificates before destroying them?
17 votes

One possibility you overlooked is to generate a revocation but not publish until needed. It does put a slight load on your infrastructure but hides the takedown of the machine, and has a revocation ...

View answer
Are there technical differences which make Linux less vulnerable to virus than Windows?
5 votes

Let's poke holes in some answers here. Linux has fewer viruses because it lacks market share. False. Although Linux has less of a market share in desktops, it has a greater share of server ...

View answer
External websites in logs
5 votes

Since GZBK covered why, I will cover the single simple solution to minimize this and related problems that I and others such as StevenC use. Make your first or default virtual host small fast and ...

View answer
HTTPS: is the data downloaded when loading a page encrypted?
3 votes

short answer: yes long answer: when using https everything is encrypted, when using http nothing is and you can do both in the same web page. most browsers warn about unsecure content in secure pages,...

View answer
Why should I care if a site uses encryption or not if I'm not exchanging any sensitive data?
3 votes

Some background before I get to my answer: I find telephones fascinating and one of the most interesting phones I came across was the STU or Secure Telephony Unit which basically consisted of an a/d-...

View answer
Silently Limiting Login Attempts
1 votes

I don't think you want to lockout a user this way, you want to lockout the endpoint. There are two reasons that you would do this: Firstly if a user is trying to login at the same time his account is ...

View answer
When does 'something you have' NOT become 'something you know'?
0 votes

This is an issue of conceptual bitrot. Specifically a great example of something you have is a photo ID with a hologram. That is it has your name photo, and an anti-counterfeiting measure. This line a ...

View answer
Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?
0 votes

Yes, there is one case where a longer password is less secure, but no one should use DES passwords anyway these days as they are trivial to crack anyway. Some implementations of DES actually were less ...

View answer
Why does the user pick the password?
0 votes

Ok passwords suck. I actually have found more evidence of early password failure than well designed password systems when looking at passwords as an access control method prior to computers. There is ...

View answer