Dmitry Chestnykh dchest

After trying to get a free certificate from StartSSL for my personal blog "sellme.ru", and my request being declined because the domain contains a word "sell", here's what StartSSL representative told me:

"We have no problem with issuing Class 1 certs for a domains owned by commercial companies or individuals, there however shouldn't be commercial activity on the web-sites they request certificates for. And their domain/sub-domain name shouldn't contain any "commercial" words. For example these requests pay.domain.com, sell.domain.com, subdomain.sellme.ru would be declined and it doesn't matter whether there is some commercial activity or not."

Technical details

I. Generating seed

Generate 16-byte Seed using CSPRNG or a source of truly random numbers.
Output Seed for a user and/or a program to store.

	<script>
	// https://github.com/dchest/tweetnacl-js/issues/12

	var gf = function() { return [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]; };
	var D2 = [61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222];

	function car25519(o) {
	var c;
	for (var i = 0; i < 16; i++) {
	o[i] += 65536;

	Problem:

	Peak electricity consumption leads to downtime.
	The majority of people don't want such downtime.

	Proposed solution:

	Switching to compact fluorescent lamp will reduce peak consumption.

	Ways to implement solution:

	function getRandomBytes(length) {
	var bytes = new Uint8Array(length);
	window.crypto.getRandomValues(bytes);
	return bytes;
	}

	function generatePassword(length) {
	// To avoid modulo bias, alphabet length must conform to 256 % length == 0, e.g. 64.
	var alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_@'.split('');
	var bytes = getRandomBytes(length);

	(function() {
	var ps = {};

	for (var i = 0; i < 1000000; i++) {
	var p = GPW.pronounceable(7);
	if (p.length != 8) {
	console.log("#"+i+" bad length: ", p);
	}
	if (ps[p]) {
	console.log("#"+i+" collission!", p);

	0
	#103 bad length: iciF0y
	#366 bad length: oAtify4
	#764 bad length: 3diFy
	#823 bad length: i4fy
	1000
	#1311 bad length: ci0fy
	#1601 bad length: e6uSify
	#1628 bad length: Tun0ify
	#1786 bad length: tif3y

	// Package secretentropy wraps any random Reader to produce a random Reader
	// that mixes a secret into its output.
	//
	// Example usage with DSA where priv is *dsa.PrivateKey, and message is a
	// message byte slice we're going to sign:
	//
	// srand := secretentropy.NewReader(rand.Reader, privateKey.X.Bytes(), message)
	// r, s, err := dsa.Sign(srand, priv, messageHash)
	//
	package secretentropy