2 votes
Accepted

CryptoKey with IndexedDB to secure stateless authentication

I think you want to store an access token only as a cookie (secure, httponly, samesite: strict). Local storage can be read via js. You might want to store an ecdsa private key as unextractable key in ...
r j's user avatar
  • 138
1 vote

How can the Beef Tool be used?

BeEF simply injects javascript into the compromised site, allowing the attacker to remote-control the tab it's running in (so long as the victim doesn't close the tab or navigate away). Therefore, ...
CBHacking's user avatar
  • 47.6k
1 vote

Securely storing derived key in web app and handling user identity

With regard to (1): See Need some clarification regards end-to-end encryption process for a few ideas around how to store users' private keys in a zero-knowledge web application. With regard to (2): ...
mti2935's user avatar
  • 23.4k

Only top scored, non community-wiki answers of a minimum length are eligible