Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

New answers tagged

3

Is there a way to whitelist our landing pages with google and the other browser makers, so even though they look like phishing pages, they don't get blacklisted in the future? I think this would be a pretty bad idea. Just imagine if hackers could white list their public phishing pages this way. If your control the way your users go into the internet you ...


-1

You will be effectively reducing your attack surface. Only the malicious actors that have knowledge of your system would be able to perform an attacks on you. Are you safe from malicious actors? No. The universe that can do malicious activities will be lower and might reduce your administrative costs. On the other side you might also increase your ...


1

The white-list access to a server for only known client IPs is something I have encountered occasionally and is an effective layer in a defense in depth approach. Here are the pros I see: By fully blocking access to only selected IPs, you practically eliminate your discover ability in the reconnaissance phase of an attack. If I can't access the exposed ...


4

Security benefits: If an attacker had stole your client credentials then he or she will have an additional trouble connecting to your server. Basically the intruder will have to connect from one of your client networks to have whitelisted IP address. An example of such a case: client looses his laptop or some one copies his hardrive or stole his flashdrive. ...


3

Managing an IP whitelist can be administratively difficult if new clients are added or the IPs change. This can create outages for some clients while you update the whitelist. You also have to remember to prune the whitelist of invalid IPs. Without the whitelist, anyone with valid credentials can log in. Former employees of the client, for instance. So, a ...


Top 50 recent answers are included