Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

67 votes
6 answers
48k views

My email address is being used to enroll for online services. Should I be concerned?

2 votes
3 answers
308 views

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

1 vote
2 answers
48 views

Using oauth for authentication

4 votes
2 answers
1k views

RESTful web application security and authentication scheme

1 vote
1 answer
170 views

Is username + password functionally equivalent to a single login string of the same length?

1 vote
1 answer
244 views

Authenticate Static Public Keys

0 votes
1 answer
140 views

AWS Service-To-Service authentication via Identity document

1 vote
1 answer
230 views

Should login/refresh authentication routes return new tokens if an existing, valid token is present?

1 vote
0 answers
30 views

Why "application/x-www-form-urlencoded" is normally used for login but not for registration?

0 votes
1 answer
390 views

security concerns when configuring Windows 10 to automatically log into a Microsoft account-linked user account

2 votes
1 answer
260 views

HSM best practice for access

0 votes
2 answers
2k views

Is telegram SMS login secure?

5 votes
3 answers
11k views

What is a AUTH-KEY in the security of the computers?

0 votes
1 answer
43 views

When hardening my SSH key, why would I use yubikey-agent instead of the built-in `-sk` key type native to OpenSSH?

Browse more Questions