Tag Info

New answers tagged

2

To answer the first two bullet points: Firefox has its own list of trusted CAs. You can add certificates in Menu Button>Options>Advanced>Certificates(tab)>View Certificates>Authorities(tab). This is for Firefox version 38. Yes Google is trying to shame people into moving from SHA1 to a more secure hash such as SHA2. Here is the chromium blog post about it. ...


0

The most complete solution would be to use TLS with client certificates. This allows the server to verify the identity of the client. Any other solution such as JWT's or some custom signature scheme is likely to be wildly insecure. TLS does all the hard work for you. If you are particularly worried about CA compromises, then you could set yourself up as a CA ...


1

I'm assuming what you mean is that visitors to another site will make client side requests to your API, and you want to attribute these requests to that site. There are several ways to go about this depending on how strong you need the authentication to be. If you're just using the data for statistical purposes and maybe to stop unauthorized use from very ...



Top 50 recent answers are included