Reputation
2,286
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
2 13 28
Newest
 Quorum
Impact
~145k people reached

2d
answered Using external OAauth Authentication Service, how to manage the users's relations
Apr
21
answered Sending server-generated password by email
Apr
20
answered Benefits of a wildcard vs per-subdomain certificates
Apr
9
asked Out of band verification using phone; a fallacy?
Mar
20
answered SQL injection: insert data from Get request
Mar
18
answered Authorization on complex ownership
Mar
18
answered How to implement “forgot password” functionality?
Mar
8
answered Client-side BCrypt, store salt and hash separately in MySQL database
Nov
2
answered Is there a better way to take advantage of current 'approved', 'proven', and memory/cpu-expensive algorithms while using salts and peppers?
Oct
15
asked Base64 encode diffences in BCrypt implemenations
Oct
8
answered How does one properly assess risk?
Oct
1
answered Implementing SRP Challenge login system *with SSL* (Using PHP)
Oct
1
answered Is it secure to use bcrypt-generated salt in cookie to serve as token in place of a password?
Sep
26
answered How to invalidate a session on browser closure?
Aug
21
answered Security Review - password_hash implementation for PHP
Jul
20
answered How to store salt?
Jul
12
answered PHP crypt() or phpass for storing passwords?
Jul
10
asked Comparing the standard HTML form POST for user authentication vs Javascript/AJAX
Jun
28
answered How to defend against invalid UTF7/8 that hides a <script> tag?
May
14
answered Can the salt for PBKDF2 be a hash of the user-entered password?