Tag Info

New answers tagged

1

Basically, you need to encrypt the data you want to protect using a symmetric key (e.g. AES key). This key is only known to the group of users who are permitted to access the encrypted data on the server. The key you used to encrypt the data should not be stored on the server. The encryption and the decryption happen on the client side inside the client ...


0

Don't re-invent the wheel and don't overcomplicate things. Just setup an IPSec VPN between the two nodes and pass traffic over that. Leave the security stuff to the people who know how to code security, and focus your efforts on the bits of your Python code that are required for the actual business rather than wasting time on coding up, testing and ...


0

Look for security tube python scripting expert course. It starts with very basic and quickly ramps up to build complex scripts and tools for security


2

As mentioned by Valmiky Arquissandas, encrypted text is generally expected to be computationally indistinguishable from random data. Thus, the only publicly known efficient way to do something like check if a file is "not already encrypted by AES" is to run a randomness test. However, your application should use authenticated encryption anyway, and if it ...


0

I haven't looked at your code. However, one thing you should know about strong encryption: encrypted text is supposed to be indistinguishable from random data. This being said, you can either make a heuristic that uses a statistical test to decide whether the text appears random and thus appears to be encrypted (this also means that you wouldn't be able to ...


0

In terms of sessions management, you got things right. However, there is more aspects to Django Application Security that I would suggest you to have a look at. My recommendation is to install and research the middleware module 'django-secure', and have a look at it's security enhancing options. Here are some suggestions: SESSION_COOKIE_HTTPONLY = True ...



Top 50 recent answers are included