Questions tagged [trust]

A description of a state of benevolence that exists between two or more parties. A measurement of the confidence in a benign outcome of a transaction involving two or more parties.

17 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
1answer
160 views

How to put the “trust” into trusted-timestamping

As a part of my thesis, I am about to evaluate different approaches to establish the trust in trusted-timestamping performed by a TSA (see RFC3161 - Trusted Timestamp Protocol). A trustworthy ...
3
votes
0answers
73 views

Do iPhones contain a cryptographically secure authentication mechanism?

Firstly is it true that iPhones have a trusted execution environment that can be used to protect asymmetric key pairs for which the private portion of the key cannot be exported by any means other ...
2
votes
0answers
49 views

“Trusted memory” What does it mean?

It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?
2
votes
1answer
163 views

Possible public/private identity recovery after compromise without a centeral authority?

I’ve been thinking about P2P systems using asymmetric keys and wondering if there is anyway to recover an identity in the event it was compromised using some kind of web-of-trust. This seems to be a ...
2
votes
0answers
130 views

Can developers stop their software from being flagged as malicious by AV products?

This may not be the correct community for this question, I apologize if that's the case. Scenario: A software development company has created a collection of small desktop applications. They have ...
2
votes
2answers
115 views

How can we avoid the Facebook SDK? General: Trusted forge for Android apps?

I know that privacy is dead etc, but I saw a presentation (Link: https://www.youtube.com/watch?v=OTt1AVRQyx0 )about developers of Android apps using the Facebook SDK for whatever reason in their ...
2
votes
1answer
180 views

Consequences of trusting a PC from my iPhone

I just trusted my work PC (Windows 10) from my iPhone. I connected the phone via USB to charge it. I didn't open my iPhone 6 files from the PC. I didn't view any pictures and I unplugged it pretty ...
2
votes
0answers
141 views

How can I trust a GPG key when I download it based on the fingerprint contained in the file I want to verify?

The instructions at https://tutorials.ubuntu.com/tutorial/tutorial-how-to-verify-ubuntu#3 suggest that you can download an ISO for installing an OS, along with the checksums and a signature. You then ...
1
vote
0answers
63 views

How does a GPG Keyserver deal with conflicting signatures?

Part of the web of trust of GPG is the use of Keyservers to publish/distribute versions of public keys. It's encouraged of course to sign public keys you trust so the the web may grow. How does a ...
1
vote
0answers
82 views

Trust boundaries for webapps (vs desktop apps)

I am currently working on fixing some security problems with our webapp as reported by VeraCode. Some of these pertain to "trust boundaries", i.e, what inputs can be trusted. In some cases, our ...
1
vote
0answers
40 views

Is there any financial rating of electronic trading platforms?

There are too many different online stores and paid services in the Internet! Some are big and popular, other aren't. I search for some universal financial rating of electronic trading platforms or, ...
1
vote
0answers
39 views

Is it safe to build and untrusted Sphinx document?

We would like to build a kind of wiki engine and Sphinx seems like the perfect tool for our project, given a complicated list of requirements we have. So the question is how safe it would be to run ...
1
vote
0answers
92 views

Is there a theorem that states “whatever can be done with trust can be done without”?

I remember hearing something like this when I first learned the protocols that removed the need of a trusted third party, but I can't find this theorem or "law" anywhere. Any pointers?
0
votes
1answer
57 views

Risk of specific changes to the “Trusted” security zone

Our EDI VAN provides software to transmit sensitive customer and business data between our ERP and their website. This software requires that I add several URLs (including one plain HTTP) to the "...
0
votes
0answers
20 views

Macros and Trust Center Settings - Alternative Combo of Settings

I asked a question in the about enabling Macro's in the "Trust Center" and the security implications. I have now begun signing my projects with a "Code Signing" certificate and placed that certificate ...
0
votes
0answers
84 views

Azure AD subdomains best practice

I'm setting up an Azure AD subscription for a small retailer with 3 branches and a headquarters (100s of users in each). The branches are self-sufficient and intend to manage their own users. Users ...
0
votes
1answer
254 views

Relying on internal DNS server (Domain Controller) on a DMZ Server

A couple of questions regarding DNS traffic between TRUST and DMZ and best practices. Are there any significant risks in relying on internal DNS from a web server hosted in a DMZ zone? Has the DNS ...