Skip to main content
Irfan434's user avatar
Irfan434's user avatar
Irfan434's user avatar
Irfan434
  • Member for 7 years
  • Last seen more than a week ago
  • Melbourne VIC, Australia
15 votes

JWT: Why is audience important?

11 votes
Accepted

How to mitigate credential disclosure in man in the middle attack

8 votes
Accepted

What's the benefit of JWT if user needs to send his credentials once anyway?

4 votes
Accepted

Sharing an expired certificate?

3 votes

Alternative to using Refresh Tokens?

3 votes
Accepted

Is it safe to assume that a JWT is valid if the library says so?

2 votes

Is this a secure way to protect passwords when they must be in plaintext?

2 votes
Accepted

Certs stop hackers from pretending to be a server. What stops them from pretending to be you?

1 vote

Can access tokens be given to a third party app's end users for a secure read/write process flow?

1 vote

Does the browser get the access_token in OAuth2?

1 vote

Angular (2+) code visibility to users

1 vote

.Net WebClient - self signed certificate

1 vote

is iptable whitelisting secure enough in AWS

1 vote

How to authorize user between each step in Multi-Factor-Authentication?

1 vote

Can we check fingerprint with photos?

0 votes

Combining User Context in Machine-2-Machine OAuth2 Client Credential Flow

0 votes

iCloud deletion

0 votes
Accepted

SSL certificate distribution of API

-1 votes

JWT or session cookie for API for both web and mobile app?