About

I am currently employed as a QSA (PCI, SSF, P2PE, PA-P2PE, PIN, and 3DS). I have worked in information security for twenty years with a specialization in application security and cryptography. I am an advocate of FOSS, privacy, minimalist computing environments, OpenBSD, and 9Front. All opinions and topics on this site are mine and not of my shell provider or of my employer.

Contact

I strongly prefer plaintext emails as I use [mutt] (http://www.mutt.org/) for all email correspondence. Please avoid sending me Microsoft Office documents as it is problematic for me to read them. It is much more efficient to send me plain text, HTML, LaTeX, or even PDF file formats.

I can be contacted at the following email address:

sshifflett at the site sdf.org

Please note that I use a third-party email service provider. The admins of that service provider are able to read all my incoming and outgoing mail. This is by definition how email infrastructures work and it is irrelevant whether encapsulation is used between email clients and corresponding email servers. Please consider using public key encryption to secure our communication. Using my public key allows you to at least gain a reasonable level of assurance that my message originates from me and has not been modified en route. Please feel free to exchange keys with me.

You can download my public key here and GPG fingerprint here .

Locations

I can be found on GitHub, Mastodon and registered as sshifflett on irc.freenode.org.

Personal Computing

My personal system for most tasks is MX Linux running on a salvaged 2012 MacBook Pro laptop. For travel and projects outside my home I carry a thumb drive running Tails.