Reputation
203
Next privilege 250 Rep.
View close votes
Badges
1 6
Newest
 Yearling
Impact
~5k people reached

  • 0 posts edited
  • 0 helpful flags
  • 6 votes cast
Dec
11
awarded  Yearling
Nov
4
awarded  Commentator
Nov
4
comment Is BASIC-Auth secure if done over HTTPS?
There is one slight difference between those situations: with http basic authentication the password is sent for every request, while with a form based login it is sent only once and then something like a session cookie is used. This very slightly decreases the attack surface.
Sep
17
awarded  Critic
Aug
3
comment Self-signed certificates not working over Internet?
@BenVoigt I suggest you read the links I gave in my answer. Or listen to the podcast I linked to. None of this is actually very relevant to the OP's question though, so I'm going to leave it at this.
Aug
3
comment Self-signed certificates not working over Internet?
@BenVoigt that's not true. It's still the case that the connection is confidential and cannot be eavesdropped, which is what proponents of "https everywhere" are mainly concerned with. There are plenty of trivial websites for which having to prove their identity is unnecessary overkill.
Aug
3
revised Self-signed certificates not working over Internet?
clarify
Aug
3
comment Self-signed certificates not working over Internet?
@WoJ you're right. That's what I meant to imply, but I should make that clearer.
Aug
3
revised Self-signed certificates not working over Internet?
consistency
Aug
3
answered Self-signed certificates not working over Internet?
Jun
15
awarded  Scholar
Jun
15
accepted Is there a way to give out secure tickets wihout storing them?
Jun
11
revised Is there a way to give out secure tickets wihout storing them?
remove brain fart. struck out because it is referred to in comment
Jun
11
comment Is there a way to give out secure tickets wihout storing them?
Excellent point @SilverlightFox. I have no idea now why I wrote that.
Jun
10
awarded  Editor
Jun
10
revised Is there a way to give out secure tickets wihout storing them?
clarify A is public
Jun
10
comment Is there a way to give out secure tickets wihout storing them?
@NeilSmithline No, the page ID is public.
Jun
10
comment Is there a way to give out secure tickets wihout storing them?
I don't think I need the page ID to be hidden (I can't think why, it wouldn't prevent any attack I can see; the page ID would be in the URL so it is public anyway), so I don't think the ID being in cleartext is a problem.
Jun
10
comment Is there a way to give out secure tickets wihout storing them?
Ah yes of course, I should have thought of that. Thanks!
Jun
10
awarded  Supporter