July 2013

Strategies for Deploying 2FAJuly 9, 20134 min readIdentity & Authentication Security Practice
Two Factor Authentication (2FA) enables applications and services to tie the usage of a two things (typically something you know and something you have) to user accounts so that both factors must be proven prior to the…
Windows Certificate Enrollment ProtocolsJuly 8, 20131 min readPKI & Certificates Engineering & Code
Windows has two sets of certificate enrollment protocols; these protocols are used to enable a client to acquire and maintain certificates with little to no manual interaction.
DCOM and your FirewallJuly 8, 20131 min readEngineering & Code Security Practice
DCOM (Distributed Component Object Model) is a framework used by Windows to allow COM components to work over the network.
Enterprise logon with challenge response (OTP) tokensJuly 2, 20133 min readIdentity & Authentication
So from time to time I am asked about how to add support for a new authentication method for Windows Logon, the answer to that question is buried in what authentication methods Windows natively supports.
How to redirect POST’s based on their Content-Type in NginxJuly 1, 20132 min readEngineering & Code
Time, it gives everything context especially in Public Key Infrastructure (PKI).