We have some reason that we should not use same key for encryption and signing.
1- We need to backup our secret key for encrypted data, maybe later we want to decrypt some old encrypted message but we don't need to backup out secret key for signing. if attacker find the key we can tell CA and pu...
I'm fairly lost as to how this could allow someone to re-generate my private key or decrypt messages that are encrypted with my public key.
meh - I misread the question - you already had that bit
@packs - I'm GMT/UTC consultant, but work odd hours. The odd bit before taking the kids to school, then 8.30 to 7ish (sometimes picking up kids at 3.30) then 10ish to 1ish
@packs lol. I'm in UTC+2, freelance consultant. the UTC-5 is just cuz I tend to work odd hours, often passing the 4am mark... though lately I find myself tired earlier on, probably cuz of the damn heaters
Also, I tend to be offline friday/saturday...
going now to catch up, I have to edit all of @GrahamLee's posts.... :D
@GrahamLee @AviD Was just looking at the two mod flags - think both could be community wiki, unless I misunderstand the reasons for wiki. What do you reckon?
wrt the CW - I'll admit I'm not too clear myself on the current purpose of community wiki. Historically, it was quite different - anybody could mark a post - q or a - as cw.
Now, I think it mainly gets used for borderline offtopic q's - *just barely* ontopic, so lets mark it cw. I'm not so sure....
maybe ask over in teachers'?
Absent any other guiding principle - I might say that it might make sense to use CW on q's that are kinda like polling - e.g. "which X product does Y", " what Z is your favorite" etc. The ones that DO have value, anyway (as opposed to the generic list-questions which should be closed...)
@AviD One of my friends works hours similar to that. Except he also has a day job. All the way back to high school I remember him only sleeping about 5 hours at a time. He has a lot more free time than I do.
There were 3 questions about ssl that just popped up. The one about intermediate certs actually seemed reasonable to me, but the other two felt a bit out of scope.
As Steve and Avi have asked, you are either referring to passwords for users of a website/web application or passwords for the system. Typical protection for the two options:
Passwords for web application / web site:
Stored in a database which is separated from the web DMZ by a firewall, not on...
Got things sorted out so I'll head off and blog copiously from B-sides in SF. Will ask Jeff and Rob as to things they'd like in general from an SE proponent, but any thoughts?
As an extension to this question, we plan to publicise this forum at the B-Sides in San Francisco and London, so are thinking up useful marketing ideas () - but thought it would be useful to get the community's thoughts. These will also be useful at other events where relevant.
Currently we have...
can someone please tell me a few tools that can be used to create a CSR ?
