Stof's user avatar
Stof's user avatar
Stof's user avatar
Stof
  • Member for 3 years, 3 months
  • Last seen more than 1 year ago
5 votes

How to dump SSL key log for non-browser applications?

3 votes

Encrypting the API response in a single page app

1 vote

Security requirements for public API keys

1 vote

HTTP authentication with client-side private key

1 vote

What's the best way to "witness" TLS in action between two communicating services over a network?

1 vote
Accepted

How can I find the list of certificates present in a set of CA stores

1 vote

PCI-DSS Level 1 requirement for Intrusion Detection and Prevention on AWS API Gateway and AWS Lambda

1 vote

Does PCI-DSS requirement 10 ("track and monitor all access to ... card holder data") apply if I am not storing card holder data?

1 vote

Would a hostname from an HTTPS iframe leak if loaded after a successful connection with another HTTPS hostname which displayed the iframe

1 vote

Is it bad practice or major security risk to cache decoded auth tokens in my backend?

1 vote

Custom PKI for TLS in iOS vs. Android

1 vote

iOS & Android Certificate Pinning with Lets Encrypt

1 vote

How to safely store/process secret key for JWT

1 vote

How can I find if my website code has been implemented somewhere else?

0 votes

CVSS Temporal guidance

0 votes

What is the impact of someone accidentally getting my IMEI number from my Android phone?

0 votes

Why are SSL certificates valid only from a certain date?

0 votes

Are AWS security groups enough to segment network and reduce PCI scope?

0 votes

How to do auth without user interaction in an enterprise environment?

0 votes

Is end to end encryption over HTTP safe?