Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite.

Here is an image of the default cryptography settings for a 2008 R2 CA. This machine is a n… Continue reading Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite.

Here is an image of the default cryptography settings for a 2008 R2 CA. This machine is a n… Continue reading Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Inconsistencies found in OpenID Provider’s HTTP Headers. Which one is the most secure that I should imitate in my STS, and Relying Party?

I’m comparing the HTTP headers of the various providers (LiveID, Google, Yahoo, etc) and notice a broad inconsistency in implementation on the sign in page, sign out page, and subsequent pages.

What headers should I set/ignore, and what i… Continue reading Inconsistencies found in OpenID Provider’s HTTP Headers. Which one is the most secure that I should imitate in my STS, and Relying Party?

What browsers support encryption or decryption using local certificates, or smartcard readers?

I am working on a cloud-based solution and I would like to encrypt / decrypt the data locally using either a SmartCard or local Machine certificate. I’m hoping to do this in Javascript, but may resort to Silverlight, ActiveX, or Flash (in… Continue reading What browsers support encryption or decryption using local certificates, or smartcard readers?