Category Archives: tls

The blog was down yesterday

The brief outage was due to a scheduled move of the servers to a separate rack and subnet dedicated to our work with the Center for Information Assurance & Cybersecurity (ciac) at the University of Washington Bothell (uwb), and a11y.com … Continue reading

Posted in 19.34 RCW, abuse, ajax, asterisk, auditing, BIG-IP VE 11.2, brctl, C.J. Insider, centos, Citrix Xen, colliertech, cryptography, css, debian, dns, Eating CenturyLink's Lunch, ESXi, F5, Free Software, html, investment, javascript, kerberos, kvm, libvirt, linux, LSI, lvm, mediawiki, MITRE, mysql, network neutrality, network saturation, Networking, NIST, nsa, NVD, open source, PeRC, perl, pgp, powerconnect, poweredge, PRCCDC, procurve, proliant, python, qemu, quagga, RADIUS, rate limiting, rumor mill, security, SELinux, shorewall, spam, squeeze, storage, Telephony, tls, tmm, traffic shaping, virtualization, WanJet 500, washington, web 2.0, wheezy, x509, xen | Leave a comment

Currency platform superior to US Federal Reserve Bank

Should I recommend that Software in the Public Interest implement a monetary stack with the stated purpose of replacing the federal reserve system? We would have to publish the source code, of course, and the transaction db would need to … Continue reading

Posted in 19.34 RCW, C.J. Insider, Databases, debian, feds, frb, Free Software, kerberos, network neutrality, Networking, NIST, open source, pgp, PRCCDC, RADIUS, security, SELinux, shorewall, Software, tls, x509 | 1 Comment

Filing to become a licensed CA

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

All Operative Personnel employed by Collier Technologies LLC, known
here as the Certification Authority or CA, must also be licensed as
notaries public by the local government where they reside during any
act performed on behalf of the CA.

In addition to passing the Washington State Operative Personnel Exam,
all OPs employed by the CA will demonstrate their proficiency by
a) creating a request for issuance as described in 19.34.210§1
RCW, known here as a Certificate Signing Request or CSR; and
b) signing CSR from (a) with a private key issued by the
Certification Authority; and
c) publishing the public key corresponding to the CSR signed in
(b) in a recognized repository as defined by 19.34.400 RCW

While holding the position of Operative Personnel for the CA, the OP
will
a) utilize the private key corresponding to the CSR presented
during the demonstration of proficiency exclusively
b) not use the private key referenced in (a) for purposes other
than those performed on behalf of the CA.

All private key data controlled by the CA and all Operative Personnel
must be
a) stored on a solid-state device; and
b) kept within a locked safe except while in use by OP acting on
behalf of the CA.

All solid-state devices containing private key data controlled by the
CA and all Operative Personnel may only be used
a) on a Trustworthy system, as defined in 19.34.020§43 RCW; and
b) with a system which remains always disconnected from any
computer network
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkwmPOMACgkQXKBS0hdr6UYPTwCglr89VbTlw/wPuLqihaduw8Cw
z1gAnjwiDx47FTInVHBo9bo9VsVn/IDl
=9oar
—–END PGP SIGNATURE—–
Continue reading

Posted in colliertech, cryptography, debian, Free Software, government, investment, linux, pgp, security, tls, work, x509 | Leave a comment

spamassassin tls plugin

Anybody got a tls plugin for spamassassin? Something that will check to see whether incoming mail is signed by a certificate known to and trusted by spamd?

Posted in mysql, network saturation, performance, rss, spam, spamassassin, tls | Leave a comment