LamonteCristo

New York, NY

val-id.com

Age: 39

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?

2h
awarded Popular Question
8h
awarded Nice Question
14h
asked Can a single "Client Access Server FQDN" serve Public Folders and a DAG?
1d
awarded Notable Question
1d
awarded Popular Question
2d
revised How can mobile sign-on be secured from imposter authentication screens?
added 358 characters in body
2d
asked How can mobile sign-on be secured from imposter authentication screens?
2d
answered What do you guys want to know about what is said in the DMZ?
2d
answered What do you guys want to know about what is said in the DMZ?
2d
answered What do you guys want to know about what is said in the DMZ?
2d
comment Are the rules used to validate certificates in the major browsers documented anywhere?
Not to mention if CRLs are used, AIAs if the whole chain is sent, HTS, DANE, OCSP. THEN we get to talk about cipher suites, validation for special features (Same Origin), Channel Based Cookies, version downgrade support, KeyUsages, EKU, support for the Critical keys, validation of intermediate keys (some don't check revoked intermediates). This is a big, but awesome question.
Aug
30
comment How should I test all 300 of my AcceptedDomains for Autodiscover issues?
@VickVega not sure I follow, would I need to manage the DNS, IIS or both of the 3rd party companies?
Aug
30
comment How should I test all 300 of my AcceptedDomains for Autodiscover issues?
@VickVega Yes, managed by myself - no special multi tenancy options. Most manage their own DNS and have their own workstation AD. (e.g. they pay us a fee to host mailboxes, but not a real multi tenancy, not a real unified company) I added a working solution for my HTTP needs below. will need to test SRV records in DNS as well.
Aug
30
comment How do I fix a non-starting "Microsoft Key Distribution Service"? (not to be confused with Kerberos KDS)
@magicandre1981 I did it, not sure if I did it right - see above...
Aug
30
revised How do I fix a non-starting "Microsoft Key Distribution Service"? (not to be confused with Kerberos KDS)
added 123 characters in body
Aug
30
comment How important is split-horizon DNS?
If you're using Windows DNS, it should be pretty easy to use Powershell to iterate through all the records and update them with the contents of the external DNS server (Get-DnsServerResourceRecord)
Aug
30
answered What do you guys want to know about what is said in the DMZ?
Aug
30
comment How important is split-horizon DNS?
Sometimes, there is a technical infrastructure need for this (AD), and the rationale, and extra complexity /hassle is a side effect. Sometimes the initiative for this design isn't security related.
Aug
30
comment Possible for Lync (Skype for Business) to adopt Activesync-style policies?
@schroeder I'm OK with the move - what happens to the bounty (doesn't matter really to me)
Aug
30
accepted Do any Exchange hardening guidelines recommend disabling OWA Webready? Should they?
1 2 3 4 5