Skip to main content
Prime's user avatar
Prime's user avatar
Prime's user avatar
Prime
  • Member for 5 years, 4 months
  • Last seen more than 1 year ago
  • TX, USA
10 votes
2 answers
4k views

Should http basic auth passwords be stored hashed serverside?

7 votes
2 answers
6k views

Appending a secret (pepper) to Argon2 password hashes

5 votes
2 answers
1k views

Why did WebAuthn beat PAKEs as the preferred password replacement?

3 votes
2 answers
3k views

Why does pinning a CA root certificate not present a security risk?

2 votes
1 answer
2k views

Does SSL inspection break applications utilizing certificate pinning?

2 votes
1 answer
8k views

In AWS EKS, how should Kubernetes certificates be generated?

2 votes
3 answers
165 views

Is it advisable to tie different capabilities to different session tokens?

1 vote
0 answers
124 views

Is checking to see if any parameters contain "__proto___" an effective way to mitigate Prototype Pollution vulnerability?

0 votes
1 answer
656 views

Why is Content Security Policy necessary given Same Origin Policy?

0 votes
1 answer
187 views

How are Fetch Metadata Request Headers more secure than the Referer Header?

0 votes
1 answer
730 views

When encrypting password hashes, how to handle nonces?

0 votes
2 answers
330 views

What prevents an attacker from registering a TLS certificate for an existing site?

-1 votes
1 answer
471 views

Best tool for cracking SHA-1s with unique pre and post salts? [closed]