1,307 reputation
1412
bio website martinstoeckli.ch
location Switzerland
age 41
visits member for 2 years, 1 month
seen 16 hours ago

I belong to the lucky people, who can combine job and hobby, in my case writing software. Coming from the Delphi world, i'm working more and more with CSharp and use PHP for my spare time project, an internet lost-and-found office.

// Don't tell people not do something, explain the reasons and let them think for themselves.


Mar
30
answered HTTP/HTTPS on the same site
Mar
21
answered Why is it not standard practice to run password-based KDF's client-side?
Jan
31
answered Do you need to use the same number of rounds for everyone with bcrypt?
Dec
16
answered Can't brute force password cracking somehow be throttled?
Nov
12
answered Is it useful to protect hashed password with encryption?
Nov
8
answered How secure is redirecting user from http://normal.bank.com to https://secure.bank.com?
Oct
18
answered Altering passwords before storing
Sep
27
answered Secure authentication: partial client-side key stretching… please review/criticize my idea
Sep
1
answered Do salts have to be random, or just unique and unknown?
Aug
29
answered Why is password hashing considered so important?
Aug
27
answered Please help verify my understanding of Domain Validation (DV) SSL Certificate
Aug
17
answered What are the benefits and drawbacks of emailing a user a login token/link?
Jul
2
answered Session token is not changed on login?
Mar
22
answered When checking a session variable to see if a user is logged in, is it enough to check to see if the variable is set?
Mar
1
answered Credit card forms on HTTP pages a MITM risk?
Feb
8
answered How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
Dec
21
answered If someone asks to borrow your phone to make a call, what could they do?
Dec
20
answered How can I explain SQL injection without technical jargon?
Dec
12
answered Gold Standard for password hashing
Dec
6
answered cookies “secure” flag