Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

0 votes
1 answer
17 views

How message authentication code (MAC) works?

106 votes
8 answers
144k views

Certificate based authentication vs Username and Password authentication

0 votes
1 answer
32 views

Does Google Authenticator share device information to website?

0 votes
0 answers
20 views

Modelling authorization on the basis of authentication method

0 votes
1 answer
27 views

Can the services inside the VPC be authentication less?

2 votes
1 answer
268 views

Possible public/private identity recovery after compromise without a centeral authority?

0 votes
1 answer
433 views

Why is the Diffie-Hellman exchange not enough to authenticate the communication partners in IKE_SA_INIT?

2 votes
1 answer
395 views

What are disadvantages of a reverse OTP flow, where OTP is visible on a website and is retyped on authenticated mobile client?

2 votes
4 answers
705 views

How should one manage authentication on custom line of business software

0 votes
2 answers
254 views

Effective Free and Anonymous Web Form Encryption

0 votes
1 answer
29 views

Can third-party authentication yield a static user-specific encryption key?

1 vote
2 answers
276 views

Is there any way to guarantee real user registration?

0 votes
1 answer
43 views

Creating secure website-based login for a desktop app

1 vote
1 answer
65 views

What are the security best practices to implement offline login of android apps?

Browse more Questions