mwwaters

4 ms·

31.
by mwwaters 3y ago
I think the DNS key is only for the handshake to provide the certificate for the actual key. Without a certificate from a CA for second part, all the spoofed DNS key would get is what website they were trying to visit.
32.
by mwwaters 3y ago
It is sort of the inverse. To be pedantic, mechanics have mechanic's liens which allows them to hold a car forever until they're paid. If it's worth enough for Google, Google could definitely bring full force of judgments. Th
33.
by mwwaters 3y ago
There are various methods of getting and collecting judgments where it will be illegal to not pay, or at least illegal to not cooperate with collections. The easiest mechanism is definitely just refraining from providing more services. But
34.
by mwwaters 4y ago
The OTP is already a second form of authentication. An email link would be a third form. I never saw that when I used Authenticator. Anyway, the user would likely still click the link in the email since they are trying to log in.
35.
by mwwaters 4y ago
Any OTP can be phished. There is no automatic authentication that the OTP is being given to the correct party. A public/private key alone would have a similar issue, but the browser for FIDO keys gives the domain it's actually tal
36.
by mwwaters 4y ago
A compromised main UI device could also show the wrong account recipient, even if hardware key is used. The text could be changed on the screen when the user meant to send a small payment to someone else. Yubikey will be pressed like usual.
37.
by mwwaters 8y ago
I'm a bit late, but this is referring to ditching RSA only for encrypting a symmetric key. The algorithm is vulnerable to side channel attacks since it expects the plaintext to follow a certain padding. The method only has 6% use today
38.
by mwwaters 8y ago
91% of incoming email to Gmail uses opportunistic TLS. STARTTLS has proposals to harden its security. MTA-STS uses DNS to advertise a domain will always use TLS for email. DANE/DNSSEC is the ultimate solution though that's very am