Reputation
946
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
12 23
Impact
~322k people reached

Apr
28
revised Force dig to resolve without using cache
added 701 characters in body
Apr
18
awarded  Notable Question
Apr
14
comment How are UDP source ports selected?
This answer specifically describes Windows behavior. The other answer is about Linux behavior. Assuming these are still up to date it looks like Windows does not randomise by default like Linux does.
Nov
3
awarded  Necromancer
Sep
1
comment How can I choose between using my ISP's DNS, or Google's 8.8.8.8?
As an Australian, I would trust Google MORE than my ISP, if it was just on an individual basis.
Sep
1
comment How can I choose between using my ISP's DNS, or Google's 8.8.8.8?
Note that your ISP can just as easily log dns requests to 8.8.8.8 as to their own dns servers. So its more a question of who do you trust out of your ISP, or both Google AND your ISP.
Aug
25
awarded  Caucus
Aug
12
comment Recommendation: Company website forced to https?
I realise this is an old answer, but the HTTPS not caching thing was always largely a myth. Browsers will still obey your caching directives as they would without HTTPS, ie they will treat something with "Expires" or "Cache-control: max-age=xx" the same way and do the same conditional requests and stuff. All you lose is caching by public proxies which is not a loss and kind of the point of HTTPS. The point about latency is absolutely right though, which is mitigated a little with new technology like TLS False Start, but not completely.
Jul
29
revised OpenDKIM - verifying mail forwarded by mailing lists
added 557 characters in body
Jul
14
revised Preventing SSL access to an Nginx Server
added 2 characters in body
Jul
14
comment Preventing SSL access to an Nginx Server
Yes, if a client without SNI connects it would go to your default_server for that listening port, which will result in the return 444. There's not really such a thing as a wildcard certificate from an actual CA, and multiple domain certificates are never cheap. Furthermore, in my testing the return 444 was only effective after the SSL connection was established, meaning nginx still served up a certificate for one of my other SSL sites, which had to be accepted, before the return 444 had an effect. However, my testing may have been flawed - I did not test with no other SSL sites.
Jul
13
revised Preventing SSL access to an Nginx Server
added 402 characters in body
Jul
13
answered Preventing SSL access to an Nginx Server
Jul
8
comment Any way for openssl to generate private key with 400 (-r--------) permissions from the start?
Note: that will probably result in a key file with permission of 600 or 700; to get 400 I think the umask should be 0377. Not that there is really any significant difference between them in this particular case.
Jul
8
answered Any way for openssl to generate private key with 400 (-r--------) permissions from the start?
Jul
7
comment Any way for openssl to generate private key with 400 (-r--------) permissions from the start?
Looks like my question is answered here: unix.stackexchange.com/questions/196802/… But that's a different site so I can't flag as duplicate.
Jul
7
asked Any way for openssl to generate private key with 400 (-r--------) permissions from the start?
Jun
25
awarded  Yearling
Apr
4
awarded  Popular Question
Feb
19
awarded  Necromancer