Tag Info

New answers tagged

1

Most of the sites have a server certificate also called an SSL certificate which is signed by a trusted third party certificate provider (called Certificate Authority). Your browser has an inbuilt list of authorised third party certificate providers(CAs) and if the site you open provides a certificate signed by one of these CAs then the browser knows that it ...


1

Often times phish detection on email and web sites is detected via keywords. It's looking for text that is attempting to convince a user to input credentials, submit personal information, or even uploading documents. The anti-phish technology can also detect strong persistent language and use of hyperboles that is consistent with pressuring a user into ...


0

OAuth 2.0 pretty much requires HTTPS, as it doesn't have any means to make tokens secure. So, if google and facebook actually allow you to use OAuth2 over plain HTTP that is bad. Are you sure that is the case? I thought both of them are https-only for quite some time. On the other hand, OAuth1 works fine over plain HTTP as it has it's own layer of secure ...



Top 50 recent answers are included