Viewing profile — kniht

It's also possible to make the cookies non-exportable using a similar technique called channel binding[1], where the cookie is linked to the TLS channel it's minted over. This is a…

It looks like ChannelID has been enabled since Chrome 24[1]. [1] https://code.google.com/p/chromium/issues/detail?id=136462#c...

TLS client authentication allows the server to detect when an active MITM attempts to get into the connection[1]. This means that if you hold the theory that the NSA is acting as a…

> provided they don't use cipher modes that provide forward secrecy They use a PFS cipher spec: http://googleonlinesecurity.blogspot.com/2011/11/protecting-...

It bears repeating because this argument comes up in every PRISM thread... The basics: HTTPS is TLS/SSL transport level encryption of HTTP traffic (including HTTP headers). The way…

AFAIK a strong key passphrase would be effective at protecting the private key while it's at rest (stolen laptop / hard drive). However as soon as the private key is pulled into me…

If you're doing public key crypto on the client side in javascript, then the client side JS must necessarily have access to the private key (unless you have a TPM _and_ browser hoo…

That proposal is for an ephemeral, per gTLD client key and an example of mutual authentication that aims to defeat _active_ attackers (MITM). Perfect forward secrecy in TLS is a bi…

So you want to transmit potentially sensitive information through the post in plaintext? Just to give the middle finger to the NSA?

You should look into how perfect forward secrecy works in TLS before you make these kinds of claims. [1] http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-se...

These are all things you should be doing anyway, even if you're pursuing a degree, and want to land a good software engineering job. So the "without a degree" caveat doesn't really…

Charles Schwab will issue a two factor device for online banking, but it is not required for withdrawals AFAIK.

The old compose _was_ broken (at least for me). I encounter the use case where I need to reference data from another email when composing a new message all the time. This used to m…

Yes. http://dsandler.org/brdfdr/