這是 Ian Hickson 在 Google 一個有關 HTML5 的演講, 直接打 code 來 demo。部份瀏覽器已在實作這些功能了。對於熟識 HTML 的開發者,應該會看得很興奮。下面是高清版本:
Update: 貼文這段 video 竟然 no longer available… 但這是 Google 自己 host 的啊… 等一下看看會不會再有 update
Suppose that your web server's SSL certificate's private key iscompromised and stolen by an attacker. Further suppose that you detectthis and replace the compromised certificate with a new one. Now, here'sa question: what damage can the attacker still do with their stolencertificate?
(SSL certificate

這是 Ian Hickson 在 Google 一個有關 HTML5 的演講, 直接打 code 來 demo。部份瀏覽器已在實作這些功能了。對於熟識 HTML 的開發者,應該會看得很興奮。下面是高清版本:
Update: 貼文這段 video 竟然 no longer available… 但這是 Google 自己 host 的啊… 等一下看看會不會再有 update
Here is an interesting question: does SSL have perfect forward secrecy , so that anattacker who compromises a server key still can't decrypt the server'sconversations?
(While lots of people talk about SSL, thereal name of the whole protocol is TLS , more orless. 'SSL' is the name Netscape gave to the original protocol; TLS isthe name that it was officially standardized as.)
The answer turns out to be 'sort of', as I have found out through abunch
I have a production Solaris 10 x86 server with an onboard serial port. Iwant to make the Solaris 10 equivalent of a getty process listen onit, so that I can still log in when the system's network falls off acliff. Ideally it would do so with a (fixed) baud rate of my choice.This is all that I want to do; in particular, I do not want to makethe serial port into the system console (especially as this wouldrequire a