adamcaudill

11 ms·

1.
On the need for an open Security Journal(adamcaudill.com)
2 points by adamcaudill 10y ago|0 comments
2.
Ruby OpenSSL and GCM Nonce Reuse Bug(adamcaudill.com)
3 points by adamcaudill 10y ago|0 comments
3.
HSTSPreload.com: A simple API to check browser HSTS preload status(hstspreload.com)
1 points by adamcaudill 10y ago|0 comments
4.
Underhanded Crypto Contest – All Entries Published(underhandedcrypto.com)
4 points by adamcaudill 12y ago|0 comments
5.
Announcing the Underhanded Crypto Contest(underhandedcrypto.com)
4 points by adamcaudill 12y ago|0 comments
6.
by adamcaudill 12y ago
Good point. I should have thought of a better title.
7.
by adamcaudill 12y ago
I'm not the only one working on it, but I am the lead. I have my doubts too - but I don't see that as an issue. Any email replacement has a long way to go before it would be used widely - getting a real standard through the IETF a
8.
by adamcaudill 12y ago
Change has to start somewhere. Starting with a draft and getting feedback from the community before pushing it ahead for more formal standardization seems like the right place to me. As I said in the article, my goal is to get people talkin
9.
by adamcaudill 12y ago
Yeah, I have mixed feelings about that one; I almost didn't include it, but it's an argument that I hear often enough that I thought it was worth pointing out. Personally, I have my key on my phone, and I'm fairly comfortable
10.
by adamcaudill 14y ago
Based on what's been said here, and on twitter (i.e. https://twitter.com/rmhrisk/status/300351604715057154 ), doesn't it appear that they are in violation of that requirement? Unless contracts and audits meet the requirement for "cannot."