hansnielsen's comments

hansnielsen | 5 years ago | on: OpenSSH 8.6 Released

Really looking forward to seeing ssh-rsa (i.e. RSA with SHA-1) behind us!

Unfortunately, implementation support for the new RSA with SHA-2 algorithms is still behind in some languages. I've had an open issue for Go's x/crypto/ssh since last February with an accepted proposal and working code, but I've struggled to get a review despite clear interest on the issue.

https://github.com/golang/go/issues/37278

https://go-review.googlesource.com/c/crypto/+/220037/

hansnielsen | 11 years ago | on: Apple.com currently has a self-signed certificate (fixed now)

Extended validation certificates[1] (the fancy ones with the green URL bar) aren't allowed to contain wildcard entries.

1: http://en.wikipedia.org/wiki/Extended_Validation_Certificate

hansnielsen | 11 years ago | on: I'd like Caltrain to publish raw train data

I use Burp (and much of its featureset) every day at work; that's why I used it here. The free edition does basically everything you could want except for saving / restoring states (request history, requests you modified, etc). I've also used Fiddler to great effect in the past, but the fact that Burp is written in Java makes it really convenient to use when you deal with multiple OSes.