user avatar
user avatar
user avatar
lonix
  • Member for 3 years, 4 months
  • Last seen more than a week ago
9 votes
2 answers
5k views

Account verification emails with links vs codes

5 votes
3 answers
2k views

Should a logout request be authenticated?

2 votes
1 answer
865 views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

2 votes
3 answers
634 views

Password reset vs change

2 votes
2 answers
4k views

Alternative to bcrypt in .NET Core?

1 vote
1 answer
327 views

Should I specify JWT audience and issuer if I have only one SPA client?

1 vote
1 answer
118 views

Should refresh tokens be signed?

1 vote
2 answers
203 views

Refresh token replay detection

0 votes
2 answers
81 views

Revoke all refresh tokens when account locked?

0 votes
1 answer
82 views

Safe to consider webapp user's email as implicitly confirmed after a password reset?

0 votes
1 answer
233 views

Using unique per-session gpg keys to store backups on cloud storage

0 votes
1 answer
357 views

Using gpg to encrypt backups stored on remote untrusted servers