Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
Information Security

Explore our questions

Ask Question
more tags
Active 1 Bountied Hot Week Month
1 vote
1 answer
30 views

Why is it a bad idea to accept passwords one character at a time for an authentication mechanism?

schroeder♦
  • 126k
4 votes
2 answers
253 views

Adding SSO to an existing website - should SSO login link to matching email address?

ssamko
  • 101
1 vote
1 answer
165 views

Multiple SMS activation codes received by error

CommunityBot
  • 1
6 votes
1 answer
3k views

Are JWT refresh tokens in browser really that bad?

CommunityBot
  • 1
0 votes
1 answer
119 views

How to bypass XMLRPC lockout policy?

CommunityBot
  • 1
2 votes
1 answer
201 views

What is the recommended way to generate API tokens using Laravel framework?

CommunityBot
  • 1
0 votes
2 answers
30 views

How does a validity check on a stylus-made signature compare to a validity check for a pen-made signature

CommunityBot
  • 1
2 votes
2 answers
707 views

OpenID Connect with or without reverse proxy?

Dagelf
  • 111
1 vote
1 answer
45 views

AEAD: Authenticating a digest of my data instead the data itself

bk2204
  • 8,760
1 vote
0 answers
19 views

Is SRP/PAKE equivalent to an asymmetric crypto challenge?

Dolda2000
  • 171
1 vote
1 answer
144 views

For cookie containing access_token, setting secure = false, is that bad practice? Even if signed with jwt?

CommunityBot
  • 1
6 votes
7 answers
878 views

Is there a way to prove some content came from a specific website?

CBHacking
  • 42.6k
6 votes
1 answer
981 views

What is the preferred way of using AWS (specifically S3) from mobile apps?

CommunityBot
  • 1
0 votes
3 answers
75 views

Avoid checking passwords for dos attacks

Spyros
  • 1,529
Browse more Questions

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.