Jakub Žitný
  • Member for 8 years, 7 months
  • Last seen more than a month ago
How do I determine S/MIME encryption used?
4 votes

Mail client encrypts message symmetrically with a random key. This key is then asymetrically encrypted with recipient's public key and attached to the message. Recipient then using his private key ...

View answer
S/MIME doesn't protect against a stolen password, right?
1 votes

As far as I know, S/MIME doesn't use passwords, but private and public key pairs. So, the private and secret thing is user's private key. If private key is stolen, it can reveal the content. If you ...

View answer
OpenSSL create both keys at once
1 votes

OK, since noone is trying to answer this I have few tips. OpenSSL doesn't seem to know that. If you need to use pipe with the private key in stdin, you can use following. E.g. to output the pubkey ...

View answer
Best practices for generating and storing authorization codes and access tokens in OAuth server
Accepted answer
0 votes

So I've been advised that UUID is not considered to be secure enough, although practically it should be. So in Node/JS world it's better to use secure module instead of uuid.v4(). More specifically: ...

View answer
Using AES to encrypt user data
0 votes

As far as I know, this should be okay.. I did similar thing in PHP for simiar task. What's more, the user's memory is one of the best places to store the AES key. Or at least part of it. You know, ...

View answer