Joel L's user avatar
Joel L's user avatar
Joel L's user avatar
Joel L
  • Member for 11 years, 10 months
  • Last seen more than a month ago
31 votes

Chrome SSL Warning: "You cannot proceed because the website operator has requested heightened security for this domain. "

11 votes
Accepted

Security concerns surrounding HTTP GET in Web Development

7 votes
Accepted

How dangerous is it to allow arbitrary webhook urls to post to?

7 votes

Securing an API for mobile access

7 votes

What issues arise from sharing a SSL certificate's private key?

6 votes
Accepted

cookie issue with same domain same path but different port

6 votes
Accepted

Can non-https assets be tampered with?

6 votes
Accepted

"A third party is capable of monitoring your network activity" with [imported] certificates?

5 votes
Accepted

If a “man in the middle attack” obtains the username & password of user, are there mechanisms that can prevent them connecting to server?

4 votes
Accepted

Content-Security-Policy hash of script

4 votes
Accepted

What info to log/store about a user login?

3 votes

Are there any HTTP servers that can detect two cookies with the same name, but issued from different subdomains?

2 votes

Storing credit card data on behalf of customers: and transfer the data later

2 votes

Defend against HTTP fingerprinting

2 votes

Self sign SSL certificate for my mobile app?

2 votes

Look over my Web API Authentication Scheme

2 votes

Work using net nanny

1 vote
Accepted

Photo Attachment's Feature For Some Mail Servers

1 vote

Is it a good idea to hash a string and use it as a passphrase?

1 vote

Apache redirecting to unsecure port

1 vote
Accepted

User Account Guessing

1 vote

Does password-hashing "busy-work" need to be cryptographically secure

1 vote

Double step verification system for homepage

1 vote

Risk of keeping OAuth2 client_secret in application

0 votes

Encrypt user data when they log in with Facebook, Gmail, etc

0 votes

Hashing credentials. Is hash(email+password) secure enough?