Reputation
2,321
Next privilege 2,500 Rep.
Create tag synonyms
Badges
3 25 43
Impact
~262k people reached

19h
comment Is there any security implication of using WebRTC over unencrypted channel for streaming?
not really, you are not exposing anything that is not already exposed if you were using TLS.
22h
asked Is there any security implication of using WebRTC over unencrypted channel for streaming?
1d
comment Risks of securing REST API using SSL?
by using SSL, as long as it's a secure version, you are only protecting about data sniffing over the wire. But remember you need to take actions in the server side anyway such as code validation.
1d
accepted What's the purpose of the MASK in a WebSocket?
1d
comment What's the purpose of the MASK in a WebSocket?
just read all the caching proxy stuff (RFC 10.3), and seems you're right. The misunderstanding here I think is what Philip Rowlands said in the comment, because I noticed that in the data stream there is no message in plain text, but if I click on line-based text data (2.x) or unmask payload(1.x) section, the message is shown in an additional tab.
1d
comment What's the purpose of the MASK in a WebSocket?
@SteffenUllrich that's a different thing. That's for setting the communication, basically a typical exchange of a hashed secret. However, the MASK is, in theory as I understand, for not showing the data in plain text, but it's there in the wire.
2d
asked What's the purpose of the MASK in a WebSocket?
Jan
27
awarded  Notable Question
Jan
10
accepted How to detect and exploit an SQLi in a POST method
Jan
10
awarded  Notable Question
Jan
6
awarded  Necromancer
Dec
21
reviewed Approve Should i use peer block to better secure my computer?
Dec
11
answered Can the OWASP ZAP check XSS for REST API
Dec
10
asked Isolate Android system when connected to wifi
Dec
7
awarded  Custodian
Dec
5
awarded  Popular Question
Dec
5
comment Isn't online anonymity compromised by any SSL connection?
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post. - From Review
Dec
3
awarded  Custodian
Dec
3
reviewed Looks OK How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext?
Dec
3
reviewed Approve How can I track someone logged in my gmail account over imap?