Skip to main content
Share Your Experience: Take the 2024 Developer Survey
ysdx's user avatar
ysdx's user avatar
ysdx's user avatar
ysdx
  • Member for 12 years, 9 months
  • Last seen this week
12 votes

How to safely view a malicious PDF?

12 votes

Is publishing CRLs over HTTP a potential vulnerability?

10 votes

How does a password prevent an evil twin if the password is publicly known?

7 votes
Accepted

What purpose do nonces serve in the TLS 1.3 handshake?

6 votes

How can I implement TLS on a connection with very low throughput?

6 votes

What standards are there for sharing public SSH fingerprints?

5 votes
Accepted

Semicolon's relation with reverse proxy

5 votes
Accepted

Can UUID v7 be treated as a unguessable, opaque identifier?

5 votes
Accepted

Are WPA3 connections with a shared key secure?

4 votes
Accepted

accessing ELF in memory (Unix/Linux)

3 votes

Can we use a custom non-x.509 cert for TLS?

3 votes
Accepted

How are key exchange and signature algorithms negotiated in TLS 1.3

3 votes

Using V4 UUID for authentication

3 votes

How to generate a MSK from IEEE 802.1X-2010

3 votes

pops (:995) and imaps (:993) and smtps (:465) with TLS. Is the username always encrypted?

2 votes

Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?

2 votes
Accepted

TLS session ticket vs pre-shared key state management

2 votes
Accepted

Using public WPA2 Enterprise credentials for public Wi-Fi

2 votes
Accepted

OAuth2: Is PKCE required if the callback is located in the backend?

2 votes
Accepted

How to avoid session fixation (Login CSRF) by MitM attack without HSTS?

2 votes

CSRF attack when form data isn't parsed

2 votes

Limit OpenVPN client certificate to specific VPN with shared CA chain

2 votes
Accepted

Would "same-origin cookies" make sense?

2 votes

Why does EAP-TLS 1.3 not allow for PSK authentication?

2 votes

x509 certificates are still exposed even with Encrypted Client hello?

2 votes
Accepted

OpenVPN algorithms configuration to allow only TLS 1.3

1 vote
Accepted

EAP-TLS for securing internal local WLAN?

1 vote

How can I overcome my ISP's DNS redirection when DoH is blocked?

1 vote

Why does having default router credentials pose a risk?

1 vote

WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks