Tag Info

New answers tagged


Short answer: Yes! Implement security best practices in any application storing sensitive data, or capable of accessing other servers with sensitive data, regardless of it being public-facing or not. Explanation It is an all too common practice for companies to invest in securing their perimeter only. This means that access from and even to the internet ...


I don't allow SQL injection flaws on our internal web pages. The reasons I offer are: Protect your web sites from malicious insiders. There is no such thing as an internal web site. When a user of the internal web site has a browser that also is used for external web sites, you can't say the internal web site is segmented from the outside internet. My ...


Protections are in place to address risk - protections have a cost (time/effort to code, in your case) and those costs need to be compared to the benefits/costs of implementing them. If the cost of the realized risk is lower than the cost to implement protections, then it doesn't make sense to to implement protections.


One of the key factors (pardon the pun) of RPKI is the network of 'trust anchors' (think CAs) that validate the ROA certificates. You need to check with them to see if the submitted ROA is valid.

Top 50 recent answers are included