Tag Info

Hot answers tagged

4

Just to add on, _optout_ can be added anywhere in the SSID not necessarily at the end. However, Google's _nomap has to be placed at the end. Yes, 802.11x will networks will not be shared through WiFi sense. Official source: Microsoft WiFi sense FAQ. Look under "I'm concerned about sharing Wi‑Fi networks. Can you tell me a little more?" Theoretically, ...


1

Biding your applications to your AD can be done by using a single sign on solution (Web seal) such as (among several others) IBM Tivoli Access Management. This requires you to create the objects accounts (users, systems and computers), set the permissions through groups, implement the web seal login and an authentication interface for every single target ...


1

Not a full answer, but another thing to think about: with a system like that the easiest way for an attacker to gain access (ie the weakest link) is to steal the private keys to one of those client certs. Things to think about: Are the linux machines physically secure, or do they leave the building (ie laptops)? Do you have good policies for certificate ...


1

It may not be best practice because you're using a specific-purpose CA (in which case, authenticating your OpenVPN clients) for something else, but security-wise, as long as that CA is secure, your solution is fine. I would recommend however putting the private key of that CA certificate somewhere safe, like a smartcard, a completely offline computer or an ...


1

Bear in mind that when you enable third-party account authentication in your application it is because you're delegating Identification AND Authentication to that third-party, that you choose to trust. For instance, if the user chooses to login to your application using a third party account, your application doesn't have to be aware when the user changes ...



Only top voted, non community-wiki answers of a minimum length are eligible