apsillers's user avatar
apsillers's user avatar
apsillers's user avatar
apsillers
  • Member for 11 years, 6 months
  • Last seen more than a month ago
2 votes

What are the possible security issues when making a checkout system in Javascript?

3 votes
Accepted

Why did I see an insecure browser warning on a page with HTTP links?

0 votes

Risks associated with HTTP content injection?

29 votes

Is this way of encoding cryptographic hashes safe?

1 vote

HTTPS - Can server see details of client side certificate?

5 votes

Mandatory to implement HTTPOnly if Java Secure Cookies are set to 'true'?

28 votes
Accepted

Why does rfc6797 say "An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport."

29 votes

Does this CSS code expose if a message is read, and how long they have been reading it?

44 votes
Accepted

Possibility to sniff HTTPS traffic on devices without installing a certificate

0 votes

is encrypted body http secure

4 votes

Can someone steal cookie contents via a phishing attack?

5 votes
Accepted

Public key authentication: what gets signed?

26 votes

Why not use symmetric encryption?

5 votes
Accepted

Long passwords and key derivation functions

3 votes
Accepted

How to be sure that downloaded file is correct?

35 votes
Accepted

JavaScript Injection using Man in the Middle Attack

52 votes
Accepted

What are the dangers of allowing "less secure apps" to access my Google account?

5 votes
Accepted

How to prove to friend I have solution to puzzle (without revealing it)?

2 votes

Is it fundamentally possible to validate that an unmodified version of your client connects to your server?

44 votes
Accepted

Why do browsers enforce the same-origin security policy on iframes?

21 votes
Accepted

Password security

13 votes

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

2 votes

Does returning Access-Control-Allow-Origin: * weaken the security of JSON GET responses?

6 votes
Accepted

Can older or custom web browsers override the same origin policy?

2 votes

Does Google's SSL encryption for searches thwart NSA spying?

5 votes
Accepted

How do WPS (Wi-Fi Positioning System) databases have the MAC Addresses of the networks?

5 votes
Accepted

In which ways could a javascript making a cross domain HEAD request be a threat?

2 votes
Accepted

BitMessage : Key authentication?

11 votes

How to know if mail is for tracking our IP

3 votes

Is using a numbers station to transmit a one-time-pad as key actually insecure?