210 reputation
136
bio website ad7six.com
location Spain
age 38
visits member for 2 years, 11 months
seen Nov 4 at 14:08

Professional web developer.

Mostly php (CakePHP team member), some node.js, various databases/datastores - and a dash of linux (arch with a smidgen of ubuntu server).


Feb
28
awarded  Necromancer
Jan
30
awarded  Yearling
Nov
30
comment Is my session-less authentication system secure?
@Earlz From your reasoning of why you want to do this, I'd say the solution is to use a different platform; if the problem is you don't like how .net works - don't use .net. "HTTP basic authentication is difficult" <- that's a bit of a red flag - http basic auth is just that - basic (it's easy to the point of trivial to implement ordinarily, not sure what complexities .net adds to that; it's also insecure to the point of useless over http://.. though)
Nov
29
comment Is my session-less authentication system secure?
"with otherinfo being things like IP address, browser info, etc" - that sounds like if you have the same public IP as an identified user, you only need to sniff the cookie to assume their identity. Since a session id is just a cookie anyway - why create a new way to store a session cookie.
May
21
awarded  Fanatic
Mar
12
awarded  Enthusiast
Feb
23
awarded  Analytical
Feb
22
awarded  Critic
Feb
22
answered Definitely safest password storage scheme?
Feb
14
awarded  Teacher
Feb
14
revised Does prepending a salt to the password instead of inserting it in the middle decrease security?
add "in the middle" answer
Feb
14
answered Does prepending a salt to the password instead of inserting it in the middle decrease security?
Feb
10
revised How can I find the process that is trying to use smtp to send email?
give the link a title
Feb
10
suggested approved edit on How can I find the process that is trying to use smtp to send email?
Feb
9
awarded  Editor
Feb
4
awarded  Supporter
Jan
30
awarded  Autobiographer