castorio

4 ms·

1.
by castorio 12y ago
trust in protonmail is destroyed: http://www.nzz.ch/mehr/digital/protonmail-thomas-roth-javasc...
2.
by castorio 12y ago
similar approach: https://8ack.de/honeypot/ check the Country-Page
3.
by castorio 12y ago
you lost me at 'npm install -g ...'
4.
by castorio 12y ago
- boring - stupid - false - linkbait - spam
5.
Arc4random in libressl 2.0.2 (port70.net)
15 points by castorio 12y ago|16 comments
6.
by castorio 12y ago
yes, i know, but accoring to the blogpost below it should be no problem for newser browsers when using tls 1.2, but might e usefull to keep compatibility with very legacy clients, no? disclaimer: i'm not a crypto-guru, the ciphers u
7.
by castorio 12y ago
an updated version is available, now with nginx+libressl statically linked
8.
by castorio 12y ago
you might be right: i did a new test with nginx+libressl static and the results are very similar: https://www.mare-system.de/static/bimages/nginx-libressl/per...
9.
by castorio 12y ago
no, they arent a solution, but they arent a problem either. think ssh/know_hosts - file. convergence might have been an interesting approach, but i did not heard much of it lately http://convergence.io/
10.
by castorio 12y ago
using the CA-model in its current way doesnt protect you from MITM either. diginotar anyone? http://en.wikipedia.org/wiki/DigiNotar
11.
by castorio 12y ago
what do you mean by "Fast"? from what i've learned with webservers it depends on implementation: cipher-suites, keep-alive, session-ticket-reusage etc. this pic shows the perfomance for a webserver w/ different cipher-su
12.
by castorio 12y ago
self-signed is as good as CA-based from a security-POV. it's just that the browsers complain.
13.
by castorio 12y ago
sure, there exists a project already with a local copy of included sites; it would be ease (i think) to modify this project to download and evaluate a current db-copy on browser-start https://chrome.google.com/webstore/
14.
Show HN: PlaintextOffenders API and Searchable Database
7 points by castorio 12y ago|4 comments