user avatar
user avatar
user avatar
Manohar
  • Member for 8 years, 8 months
  • Last seen more than a week ago
  • California
1255 votes
3 answers
666k views

How does SSL/TLS work?

  • 132k
925 votes
11 answers
302k views

How to securely hash passwords?

  • 72.1k
655 votes
4 answers
310k views

Do any security experts recommend bcrypt for password storage?

  • 6,635
562 votes
20 answers
86k views

How can I explain SQL injection without technical jargon?

  • 4,525
415 votes
14 answers
66k views

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

293 votes
11 answers
461k views

"Diffie-Hellman Key Exchange" in plain English

255 votes
12 answers
133k views

Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?

  • 2,667
231 votes
8 answers
206k views

What is the difference between SSL vs SSH? Which is more secure?

  • 3,023
195 votes
4 answers
50k views

Amount of simple operations that is safely out of reach for all humanity?

  • 4,521
130 votes
4 answers
116k views

Is there any particular reason to use Diffie-Hellman over RSA for key exchange?

125 votes
5 answers
185k views

Is it a bad idea for a firewall to block ICMP?

108 votes
4 answers
135k views

Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?

  • 1
107 votes
8 answers
145k views

Certificate based authentication vs Username and Password authentication

  • 1,267
94 votes
3 answers
105k views

Stack Overflows - Defeating Canaries, ASLR, DEP, NX

  • 4,260
88 votes
4 answers
81k views

SSL Certificate framework 101: How does the browser actually verify the validity of a given server certificate?

85 votes
4 answers
55k views

What is Logjam and how do I prevent it?

  • 941
81 votes
5 answers
80k views

How does hashing work?

68 votes
21 answers
67k views

Lessons learned and misconceptions regarding encryption and cryptology

68 votes
4 answers
104k views

How does the digital signature verification process work?

  • 869
67 votes
9 answers
28k views

Why isn't open WiFi encrypted?

  • 2,624
66 votes
2 answers
114k views

What's the difference between X.509 and PKCS#7 Certificate?

  • 903
49 votes
4 answers
8k views

Why is key exchange necessary at all?

  • 503
47 votes
4 answers
51k views

How to achieve non-repudiation?

  • 1,767
43 votes
2 answers
70k views

Diffie-Hellman and its TLS/SSL usage

42 votes
4 answers
31k views

Demystifying Web Authentication (Stateless Session Cookies)

  • 521
40 votes
9 answers
38k views

How does SSL/TLS PKI work?

  • 12.3k
33 votes
1 answer
43k views

What key exchange mechanism should be used in TLS?

28 votes
6 answers
7k views

Shouldn't GPG key fetching use a secure connection?

  • 6,129
25 votes
1 answer
20k views

How does SSH use both RSA and Diffie-Hellman?

  • 6,497
23 votes
2 answers
11k views

Reject IP packets with an ICMP error, or just drop them?