All Questions
3 questions
1
vote
1
answer
155
views
How can I improve the application administrator's encryption keys security inside database
I am interested in the issue of establishing the security of data of users of a web application in the event of a database leak.
It was decided to use the following encryption chain:
User data is ...
9
votes
3
answers
5k
views
Is it proper to be informed that I entered an old password
I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw this message:
Sorry! You entered an old password
And even shows the date and time when I ...
7
votes
2
answers
3k
views
Considering that SRP is better than SSH and Basic Auth, how can it be implemented in a website?
SRP is short for Secure Remote Password protocol, and provides a better way for passwords to be sent over the internet.
I've read the information at it's Stanford University home page, the Wiki ...