156 reputation
15
bio website
location
age
visits member for 4 years, 8 months
seen Aug 11 '13 at 23:53

May
20
awarded  Constituent
May
20
awarded  Caucus
Apr
6
comment Unknown device on network with strange ports open. Trying to find it
I bet that's what it is.
Oct
1
comment How do I configure an SSL only site, in a way that doesn't affect browser connection limits
You are mixing apples and oranges with this question. PFS is not an alternative to AES and RC4. The certificate contents have nothing to do with DNS, in fact I don't know where you think DNS is coming into play in your performance problem. And you never say what your performance problem is. Whatever it is, chances are it is not caused by SSL -- but it can be. That is why real benchmarks are needed.
Sep
21
comment Extracting SSL certificates from the network or pcap files
where do you get ssldump from?
Sep
13
comment Port 443 unresponsive, certificate installed correctly though (I think)
stackoverflow.com specs: programming questions, programming questions, programming questions. Your question: off-topic.
Jul
28
comment Does IIS 7.5 Support AES-256?
The symmetric algorithm (AES in this case) has nothing to do with the certificate.
May
11
comment ssl communication handshake question
The most sensible thing to do is to always send the whole chain except the root. There is little reason not to, and it should always work even if the peer already trusts a certificate below the root in the chain.
Mar
5
comment Client-side certificates
No, that is not correct.
Dec
22
comment Understanding Security Certificates (and thier pricing)
GoDaddy charges $60.00 per year. If you have one paying customer then you can afford it.
Dec
19
comment Connection closed to child 0 with unclean shutdown (server domain.com:443)
Not necessarily harmless, just usually.
Sep
9
answered What are the exact protocol level differences between SSL and TLS?
Aug
1
comment UCC or WildCard SSL?
No version of IE supports SNI on XP or below.
Aug
1
comment UCC or WildCard SSL?
You can't use SNI because IE doesn't support it.
Apr
14
comment Is there a difference between a self-signed certificate and one signed by your own CA?
No. The "self-signed" property has nothing to do with external versus internal CAs. In fact the root certificates of all the external CAs are self-signed. Just go to any SSL website, like google mail, and examine every certificate in the certificate chain.
Feb
27
awarded  Commentator
Feb
27
comment How can I disable encryption on openssh?
I think umac-64 is the fastest of those mac algorithms.
Feb
13
answered import SSL Certificate from IIS to Tomcat
Feb
9
comment Dedicated IP for SSL
@T.J.: Although supported by various standards and products, I don't think any reputable CA will issue IP address certs.
Jan
18
comment How to secure adhoc networks
VPN does not have to go through a server. Each node runs its own VPN instance, and maintains security state for every other node it needs to communicate with. You can do this with IKE/IPsec using certificates for authentication.