Tagged Questions

2
votes
1answer
584 views

iOS/Android authentication and security

Here is what I am trying to do and can anyone provide some best practice advice for authentication and security? Each user will have their own private database on the cloud. He will have his local ...
8
votes
4answers
345 views

Does OpenID, SAML pose a threat to Tor's anonymity? How can I protect from a compromised .exit node?

This is a thought experiment on the interaction between Tor, OpenID and one (or more) compromised nodes in the secure path. I'm focused on how to use technology in a way that adds value to a secure ...
2
votes
2answers
399 views

What CSS is considered Safe or Unsafe within a multi tenant website?

I'm reading the Azure Patterns and Practices multi-tenant guidance and in there it says Cascading style sheets Behaviors are one feature that the Surveys site will not support. What CSS ...
6
votes
3answers
666 views

Safe implementation of sharing encryption secrets (username, password) in the cloud

I'm building a multi-tenant (cloud) environment that needs to push out (or make available for download) configuration files for agents (background services) that receive this information. One of the ...
5
votes
2answers
481 views

What are the security risks of the Azure Service Bus, and how do you mitigate them?

The Azure Service Bus is a way to relay SOAP/WCF information though the "cloud" as a XML over HTTPS payload. One risk that I see is that it essentially allows a user with only outbound HTTP/S ...