231 reputation
26
bio website
location
age
visits member for 2 years, 2 months
seen Aug 23 at 15:55

Aug
3
comment Extended Basic Authentication
This is true to some extent but if I'm able to intercept the message I can use the token. Encrypted it would be useless.
Aug
3
comment Extended Basic Authentication
is it not necessary to encrypt the random token given to the client such as I have suggested?
Feb
17
comment Encrypt data within mobile app and send to web service
I suspected such a comment. With the GPS data I want to make sure that the user is in the predefined area when he wants to send something to the web service. Otherwise the data is discarded respectively not accepted by the server.
Feb
17
comment Encrypt data within mobile app and send to web service
No, I think my question was not clear enough. A function of my application will generate a string and another function will encrypt this string, which will be sent to a server. How can I prevent a self crafted string to be passed to the encryption function after reverse engineering my application?
Aug
24
comment IDS/WAF scenario for 2 web servers
Now it should be clearer, thanks for your input.
Aug
21
comment IKEv2 in remote access scenarios
does a length limit for PSK exist or why does it REQUIRES the use of a realtively low entropy password?
Aug
21
comment IKEv2 in remote access scenarios
is the passphrase stored in cleartext on the server or just the hash of it? what do you mean with add-on authentication mechanism?
Aug
21
comment IKEv2 in remote access scenarios
Is it because IKEv2 with PSK is vulernable to active PSK sniffing attacks? But strong PSKs are resistant to MITM attacks.