Viewing profile — noahkunin

Gov employee here (18F). If the operative word is "sent" and "all" the likelihood is zero, as I can assert I've never sent a private key to NSA, and I've made quite a few over the …

OP here. I think about this every day. Ultimately, it comes down to how you construct the root origin of the problem facing government right now. For me personally (hence why this …

OP here. Yep - the record keeping is out of this world. Due to the spending clauses of the Constitution, even a penny spent in excess of budget or even without all the proper autho…

OP here. I totally grok your feeling on that, but we've adopted the opposite strategy from Day 1. Extreme transparency to the degree we're allowed, so the public can see the value …

OP here. "In theory" - most of the stories don't realize we're funded by a fund with billions in revenue, and was net positive in 2016. https://www.gsa.gov/portal/content/152462#AS…

There's actual several mentions of NIST, ATOs, and FISMA, all of which implicitly cover FIPS by reference. #acronymheatdeath

Hi Godel - I’m Noah Kunin, the Infrastructure Director at 18F/GSA. While the Department of Homeland Security (DHS) owns the Trusted Internet Connections (TIC) policy and controls (…

@bicknergseng - 18Fer here. The main issue here is how the Gov actually gets $ to that entity. There are lots of laws and rules that we need to obey about who we pay $ to - Gov doe…

18Fer here. Before I answer in greater detail, why do you think FIPS requires RHEL with mod_nss only? I don't see why an OpenSSL in FIPS mode wouldn't fit the bill too.

A daemon process periodically pulls a snapshot of all relevant information via the AWS API which is timestamped and stored into a database. The default view will show the last snap…