Marc's user avatar
Marc's user avatar
Marc's user avatar
Marc
  • Member for 6 years, 2 months
  • Last seen more than a month ago
74 votes
Accepted

Is there any security risk in not setting a maximum password length?

46 votes

HTTPS is widely adopted, why isn't encrypted e-mail as popular?

31 votes
Accepted

Do browsers know domains that are supposed to be encrypted?

29 votes
Accepted

How does a 'rainbow table' hacker obtain password hashes in the first place?

21 votes

What's more vulnerable; the data or the DBMS?

14 votes

Why would a password be hashed before being used to encrypt something?

14 votes
Accepted

Where to store private and public keys?

12 votes
Accepted

In-memory pepper

10 votes
Accepted

Where are FIDO U2F Keys Stored?

8 votes
Accepted

Why is salt+nonce authentication over insecure channel vulnerable to man-in-the-middle attack?

7 votes
Accepted

Securing internal micro-services - Letsencrypt vs. Self-signed certificates - Best practices

6 votes
Accepted

Is single iteration SHA-256 safe enough for hashing 128bit random number API keys?

6 votes
Accepted

Does the CA create the public key or is it created by the requesting server and sent to the CA?

6 votes
Accepted

how to anonymously contribute to Github

6 votes

If certificate authority generates key pair for us, do they maintain/have access to our private key?

5 votes
Accepted

How is public key included in the CSR?

5 votes

Does the terms stream and block ciphers apply to both symmetric and asymmetric ciphers?

5 votes

Why are SSH host keys stored un-encrypted?

5 votes

What exactly is client-side encryption?

4 votes

AES-256 Key Length Importance

4 votes

How can cloudflare read encrypted request without private key?

4 votes
Accepted

Phishing: allow # in user provided redirect URL?

4 votes
Accepted

What are the security implications of adding an Intermediate Certificate into the Trusted Root Store in Windows?

4 votes
Accepted

Is it the public key or the key pair that is included in the x509 certificate?

3 votes
Accepted

Is certificate signature encoded to ASN.1 format?

3 votes

can anyone with valid ssl certificate do man in middle attack?

3 votes

Is HTTP Strict Transport Security needed when only listening on port 443?

3 votes
Accepted

Explaining a bad approach - not comparing hashes

3 votes
Accepted

Help understanding CSR fields

3 votes
Accepted

PKI: How does CA certificate revocation affect leaf certificates?