Information Security Stack Exchange

3 votes

1 answer

959 views

Is passing claims about the user in an access token "abusing" OpenID Connect?

CommunityBot

1

modified yesterday

5 votes

3 answers

11k views

What is a AUTH-KEY in the security of the computers?

CommunityBot

1

modified yesterday

0 votes

1 answer

72 views

Is there an attack vector for SMS verification code using a bunch of parallel requests

Ja1024

17.8k

modified 2 days ago

22 votes

4 answers

10k views

Whats the safest way to store a password in database?

Rick Marshall

1

modified Sep 12 at 23:46

2 votes

1 answer

361 views

Possible public/private identity recovery after compromise without a centeral authority?

CommunityBot

1

modified Sep 12 at 16:04

1 vote

4 answers

1k views

Is it bad practice to exclusively use phone numbers for both the sign-up and login process?

CommunityBot

1

modified Sep 12 at 7:07

1 vote

1 answer

42 views

Can I sufficiently protect my REST Service using shared Tokens?

Sjoerd

33.2k

modified Sep 11 at 11:07

1 vote

1 answer

47 views

Who generates the TACACS+ challenge in challenge-response authentication protocols?

CommunityBot

1

modified Sep 11 at 10:06

1 vote

2 answers

2k views

What's the best format or way to generate a short-lived access token?

Lodinn

143

answered Sep 10 at 13:33

0 votes

1 answer

1k views

Disabled MD5 and enabled SHA under SCHANNEL/Hashes in registry. xfreerdp fails with an ssl i/o error

IT_User

212

answered Sep 8 at 14:38

0 votes

2 answers

708 views

Is this login flow via an authenticated email account safe?

CommunityBot

1

modified Sep 6 at 0:05

1 vote

1 answer

98 views

Is there a private, secure and easy login system?

andycaine

478

answered Sep 5 at 20:00

1 vote

1 answer

290 views

App-to-app or service-to-service authentication using federated login

CommunityBot

1

modified Sep 5 at 2:02

3 votes

1 answer

450 views

How to design a desktop application that has access to a database via LAN?

CommunityBot

1

modified Sep 4 at 6:05

Stack Exchange Network

Explore our questions

Is passing claims about the user in an access token "abusing" OpenID Connect?

What is a AUTH-KEY in the security of the computers?

Is there an attack vector for SMS verification code using a bunch of parallel requests

Whats the safest way to store a password in database?

Possible public/private identity recovery after compromise without a centeral authority?

Is it bad practice to exclusively use phone numbers for both the sign-up and login process?

Can I sufficiently protect my REST Service using shared Tokens?

Who generates the TACACS+ challenge in challenge-response authentication protocols?

What's the best format or way to generate a short-lived access token?

Disabled MD5 and enabled SHA under SCHANNEL/Hashes in registry. xfreerdp fails with an ssl i/o error

Is this login flow via an authenticated email account safe?

Is there a private, secure and easy login system?

App-to-app or service-to-service authentication using federated login

How to design a desktop application that has access to a database via LAN?

Hot Network Questions