Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with authentication
Search options not deleted
user 275431
the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.
1
vote
Most secure way to pass data from client to server?
I think you have your asymmetric encryption backwards. The client's public key is, well, public. So in theory anyone can decrypt data encrypted with the private key.
In server/client asymmetric cryp …
- 2,077
1
vote
Standard for public-key authentication (separate from channel encryption)
This sounds like a fantastic place to use the noise protocol.
http://noiseprotocol.org/
It's free from some of the assumptions of TLS but provides similar security. What you seem to be looking for is …
- 2,077
2
votes
Accepted
Am I authenticating devices securely?
TLS with mutual authentication would get around these concerns. …
- 2,077
1
vote
Random identifier vs identifier plus HMAC
Since only the server knows the key to the HMAC it's the only one who can verify the authenticity of a link.
This could be used to differentiate between a random guess and a once valid link. An IP co …
- 2,077
0
votes
Asymmetric Encryption on User Data to Allow Unauthenticated Input
Yes, if you encrypt data with the user's public key, only someone with the private key will be able to decrypt it.
Taking from the playbook of the Noise protocol, it seems to recommend mixing the publ …
- 2,077
1
vote
Can the services inside the VPC be authentication less?
Your worry isn't wrong.
If an attacker was inside the VPC for some reason (remote code execution on a server inside the VPC, hacked admin account, etc) they would have unfettered access to other syste …
- 2,077
2
votes
Accepted
Voice input as security measures for system authentication
The term you might be looking for is Voiceprint.
Is it secure when done using a single saved recording? No, for reasons mentioned in the comments. Does it approach secure when one instead trains an …
- 2,077
3
votes
How to generate SSH keys inside yubikey?
I asked the question verbatim on reddit r/yubikey and got the following answer, along with another with some reference to gpg.
ssh-keygen -t ed25519-sk -O resident # resident means, that the key will …
- 2,077
0
votes
How can Alice ping and authenticate Bob without any of them sharing their public keyes befor...
This is NN (neither participant is known), there is no authentication and very rough secrecy.
The thinnest solution is a pre-shared symmetric key (password, etc). NNpsk0 or NNpsk2. … But has full authentication and decent secrecy.
The other way is to trust a third party (CA) (XX) or share the public keys offline (KK). …
- 2,077