4,413 reputation
11551
bio website
location Poland
age 28
visits member for 4 years, 4 months
seen 1 hour ago

2d
awarded  Famous Question
Jan
23
comment Active Directory: delete vs. disable departed employees
@AdamThompson: I'm quite sure that's an incorrect reading. See II.2. "b) access to data is available only after entering the identifier and user’s authentication." You don't enter the SID/ UID, you enter the human-readable username, so you can't have two users with "adam@example.com". Now, if you can create multiple accounts that share the same SID/UID... that I do not know, but probably is not allowed either.
Jan
21
comment Active Directory: delete vs. disable departed employees
Correction, I found them here: giodo.gov.pl/409/id_art/209/j/en
Jan
21
comment Active Directory: delete vs. disable departed employees
@AdamThompson: unfortunately I couldn't find it in English, but here it is in Polish: giodo.gov.pl/144/id_art/1002/j/pl (Dz. U. z 2004 r. Nr 100, poz. 1024) you can find it in Appendix A, § IV, point 1: "Identyfikator użytkownika, który utracił uprawnienia do przetwarzania danych, nie może być przydzielony innej osobie.", google translate does a decent job at it.
Jan
14
comment Password-checking program for webmin
@HopelessN00b: It's about using it when I'm in full control of it, i.e. I'm the service provider it's not about using it only as a user. I think the accepted answer makes it pretty clear...
Nov
7
awarded  Notable Question
Nov
5
awarded  Popular Question
Oct
23
awarded  Popular Question
Oct
3
awarded  Popular Question
Sep
30
awarded  Explainer
Sep
29
awarded  Yearling
Sep
15
comment Pretested commit with Jenkins?
@MarkPeters: And how does that make the commits to not be in revision control? The point is to have all the commits in revision control. Making sure that only good commits that build and pass basic testing land in master or trunk is a Good Idea™, pushing to central repository only such commits is not.
Jul
2
awarded  Curious
May
6
awarded  Popular Question
Feb
21
awarded  Notable Question
Feb
14
comment Which operating systems ship with StartCom_Certification_Authority.pem
@Jeron: See ssllabs.com/ssltest/analyze.html?d=opencpu.org and ssllabs.com/ssltest/analyze.html?d=demo.ocpu.io for detailed report. You are sending the CA certificate, that's wrong. You should send only intermediate CA certificates. Also, you have anon and export suites enabled.
Feb
14
accepted Blocking Team Viewer
Feb
11
comment What compatibility trade-offs do we need to make in order to use a hardened SSL config for Nginx?
ECDHE suites are allowed in SSLv3 and later. Suites that use SHA2 (SHA256 or SHA384) and suites that use GCM can't be used in TLSv1.1 and earlier
Feb
11
comment Remove specified OCSP responder from certificate
first: most (if not all) browsers don't request OCSP if the site does not have an Extended Validation certificate. Second: if you want to protect user's privacy, use ocsp stapling. Third: request for ocsp is harder to eavesdrop than the http request so for stuff like www OCSP privacy problems are rather overblown
Feb
11
comment Why issue a SSL certificate that expires in 2037?
@voretaq7 it's not (only) the problem with processing libraries, the problem is that the standard, well tested format for dates before 2038 is using UNIX epoch. If you want to set dates after it you need to use different date format, and it may not be supported by other/older libraries.