Tag Info

New answers tagged

11

That "charter" is rather down-to-earth; it does not specify that "TLS should provide confidentiality and integrity" because this is taken to be obvious; instead, the charter is a roadmap to the future TLS 1.3 and thus documents the desirable changes from TLS 1.2. As for the mailing-list messages you are pointing to, I think you are over-interpreting them. ...


0

hmm is this confidential information? if is already public domain.. why even worry about how secure it is? like if this was confidential and authorized level of access then I will do the copy over ssh.. scp just to mention a simple solution.


0

There is an open source file integrity monitor called Mugsy that ships with a list of important directories to monitor for Linux: - /boot - /lib - /lib64 - /sys - /bin - /sbin - /usr/bin - /usr/sbin - /usr/local/bin - /usr/local/etc - /usr/local/sbin - /etc I'm the developer of Mugsy, so shameless plug. I agree that all files should be monitored, but ...


1

Viewstate is what you're looking for. It secures the page cryptographically, although it has known limitations that are located elsewhere on this site. An optional MAC should be enabled for sensitive pages, such as yours, that allows the client to post back prices that are used by the business layer.


1

There are no built-in solutions. (But there certainly should be!) You can indeed download the data using XMLHttpRequest 2 and then verify its hash using a JavaScript SHA-256 implementation before doing something with the result (e.g. evaling it, if it is JavaScript code). This will only work if the untrusted server supports CORS. The browser cache of the ...



Top 50 recent answers are included