Michael's user avatar
Michael's user avatar
Michael's user avatar
Michael
  • Member for 10 years, 1 month
  • Last seen more than 2 years ago
22 votes
3 answers
6k views

Why is the synchronizer token pattern preferred over the origin header check to prevent CSRF

15 votes
3 answers
10k views

Cordova/Phonegap: RefreshToken in localstorage

13 votes
3 answers
6k views

Why did Facebook not use HSTS for a long time after it became available?

11 votes
1 answer
35k views

Hydra bruteforce and JSON

10 votes
2 answers
517 views

Is it possible to guess the length of a password by sniffing TLS packets?

10 votes
2 answers
1k views

How do high-performance web applications control permission to their content?

9 votes
1 answer
13k views

What is the difference between claims, attributes, and roles?

9 votes
1 answer
4k views

How does WPA2-Enterprise protect against an evil twin attack?

8 votes
1 answer
6k views

ADFS: Verify requests from relying party

7 votes
1 answer
4k views

Content-Security-Policy & Facebook login

5 votes
2 answers
9k views

PKI: Difference between CPS and CP

4 votes
2 answers
3k views

DNS cache poisoning in LAN without MITM

4 votes
2 answers
444 views

Certificate pinning and the key distribution problem

3 votes
1 answer
1k views

Biometrics: false rejection rate vs Hamming distance in iris scan

3 votes
0 answers
81 views

Local sockets: does SSL add security? [duplicate]

3 votes
3 answers
563 views

What are the (practical) dangers of writing your own login method?

1 vote
3 answers
2k views

Pin delivery: SMS, mail, or pin mailer?

1 vote
0 answers
1k views

Is the QUIC protocol secure?

1 vote
1 answer
6k views

How to check the origin header server-wide in IIS to prevent CSRF

1 vote
2 answers
3k views

ASP.NET session id strength

0 votes
1 answer
164 views

Certificates issued directly from root

0 votes
1 answer
1k views

Snort: Arpspoof preprocessor events not showing up in BASE UI

0 votes
2 answers
7k views

Authenticate WCF call to ADFS through Web Application Proxy (WAP)