Tagged Questions
3
votes
2answers
126 views
Confidentiality and integrity for web session
When the client authenticates with our service, he is issued an opaque "token". This token includes the information, that identifies the client and some other information about the client ("payload"). ...
1
vote
1answer
71 views
Ciphertext for email vs Ciphertext for database
Let's say Bob wants to send a message to Alice. This communication requires to achieve confidentiality, integrity, proof of origin, non-repudiation. Therefore we can use this cipher-text:
ciphertext ...
0
votes
2answers
99 views
API - How can I make sure data sent by the user is only sent to my application?
I have an API and a web application where users can login through another system and then post text messages to my application, for example.
How can I assure that when this data is only posted to my ...
2
votes
5answers
145 views
Is DRM considered Confidentiality, Integrity, Availability, or some combination of the three?
I was discussing software trial time limit enforcement with a colleague and the idea of CIA came up. Do stricter enforcement techniques increase confidentiality at the expense of availability? (for ...
11
votes
6answers
2k views
Does SSL/TLS (https) hide the urls being accessed [duplicate]
Suppose I type this in my browser
https://www.mysite.com/getsecret?username=alice&password=mysecret
and an attacker is watching all traffic from me to my ISP.
What information is protected by ...
5
votes
1answer
236 views
Oracle Internet Directory (OID) hardening
What are best practices, recommendations, required reading for securing/hardening an Oracle internet directory?
note: OID is compatible with LDAP version 3.
