Skip to main content
Information Security

Scholar

 Scholar
Ask a question and accept an answer.
Awarded 18369 times.
Is using GPG/PGP for email encryption and signing still a secure method?
Awarded 14 hours ago
Understanding PKCE flow security after the first request
Awarded yesterday
mTLS for clients who won't accept private certificates for API requests
Awarded yesterday
Long-validity SSL certificates -- for non-browser X.509 client certificate authentication
Awarded Jan 27 at 6:51
What makes Certificate-Based Authentication phishing resistant?
Awarded Jan 13 at 7:34
Comparison between Just Works and a static "123456" Passkey in BLE Simple Secure Pairing?
Awarded Jan 10 at 20:17
Changes in Firefox Credential Storage version 146.0+
Awarded Dec 28, 2025 at 20:46
Does an expired intermediate CA invalidate device certificates that haven't expired yet?
Awarded Dec 28, 2025 at 8:12
In QUIC, What do servers use to encrypt traffic to the Client?
Awarded Dec 27, 2025 at 10:11
What are the reasons behind the Delta Skymiles website password restrictions?
Awarded Dec 24, 2025 at 18:24
What are the security implications of having the same password for BIOS startup, GRUB editing, LUKS2 encryption and the user account?
Awarded Dec 21, 2025 at 16:27
Why would an email include a large number of consecutive Combining Grapheme Joiner (CGJ) characters?
Awarded Dec 17, 2025 at 21:31
Should a server TLS Alert when the client selects an EC-based cipher but doesn't provide ec_point_formats?
Awarded Dec 5, 2025 at 13:53
Does re-timestamping bring value?
Awarded Dec 3, 2025 at 17:06
How to Protect Commercial Java Software Running on Client Machines?
Awarded Dec 3, 2025 at 0:56
Can you bypass PIN requirement of FIDO token protected LUKS device with hex editor?
Awarded Nov 30, 2025 at 19:25
Does an SMS OTP have to be recreated for every message?
Awarded Nov 24, 2025 at 9:50
How can CSRF occur in OAuth2 using the Authorisation Code flow if not using the state parameter?
Awarded Nov 10, 2025 at 14:18
Should refresh tokens be returned in Authorization Code flow? If not, how can a user stay logged in?
Awarded Nov 7, 2025 at 11:04
PuTTY gpg master key (2023) not validated by 3rd parties
Awarded Nov 6, 2025 at 9:15
What is the best way to authenticate and encrypt a simple, end-user started, ephemeral tcp server?
Awarded Oct 31, 2025 at 23:21
Is it secure to generate an OpenID Connect client secret in plain text in the browser (frontend) and send only its hash to the backend?
Awarded Oct 27, 2025 at 19:35
(Web App Hardening) Modern Laravel Car Rental Application Security Advice for CRUD Structure of Sensitive Documents [closed]
Awarded Oct 20, 2025 at 10:39
URL parameter "x="
Awarded Oct 16, 2025 at 16:15
Is it worth using Additional Associated Data in local-first encrypted notes app?
Awarded Oct 15, 2025 at 23:31
jwt authentication
Awarded Oct 13, 2025 at 7:33
Is there a way to exploit this DOM-based XSS in recent versions of browsers?
Awarded Oct 6, 2025 at 22:25
Are there any techniques that would compromise private DNS by checking connections in reverse currently
Awarded Oct 1, 2025 at 9:32
How to prevent javascript in a single webapp from communicating with outside servers
Awarded Sep 21, 2025 at 11:41
Does a signed TPM2 PCR policy verify the EFI code similarly to secure boot?
Awarded Sep 15, 2025 at 19:51
ECDSA key fingerprints all the same?
Awarded Sep 14, 2025 at 10:26
Mutual authentication with symmetric challenge-response protocol ap4.0
Awarded Sep 13, 2025 at 11:12
Entered a DKIM selector in DNS record that doesn't exit in Exchange 365 email. Will this cause problems?
Awarded Sep 11, 2025 at 21:09
How do browsers detect ssl_error_no_cypher_overlap(firefox)/ERR_SSL_VERSION_OR_CIPHER_MISMATCH(chrome) errors?
Awarded Sep 11, 2025 at 10:39
Is unterminated escape sequence message at response with 500 status code refer to a vulnerability [closed]
Awarded Sep 10, 2025 at 21:16
Safe methods for logins / recovery including using yubikeys
Awarded Sep 6, 2025 at 14:07
What is the complete list of values of -keypbe in OpenSSL?
Awarded Aug 29, 2025 at 7:54
Can someone use Google Login to take information from you (without informing you)?
Awarded Aug 28, 2025 at 20:32
Understand the relationships between SSO, OAuth, OIDC, SAML, Okta
Awarded Aug 28, 2025 at 6:03
SOP & CSRF with POST. Are there concerns with session state?
Awarded Aug 25, 2025 at 22:33
Asymmetric encryption for messages of arbitrary length
Awarded Aug 21, 2025 at 20:46
What EXACTLY makes an X.509 certificate "end entity"?
Awarded Aug 20, 2025 at 15:17
Secure file download: pre-signed URL vs temporary cookie
Awarded Aug 19, 2025 at 7:45
Reducing the attack surface of my service using Reverse proxy (TLS secured)?
Awarded Aug 18, 2025 at 7:17
Can VirtualBox .sav files expose sensitive data (RAM contents) and how to extract them?
Awarded Aug 15, 2025 at 20:53
Securely Transfer Files Between 2 Client Facing System
Awarded Aug 15, 2025 at 3:16
Broad usage of SSH based authentication
Awarded Aug 10, 2025 at 7:02
Do (OpenSSL generated) RSA 4096bit Public Modulus values always have 1 for the most significant bit?
Awarded Aug 5, 2025 at 7:10
If a malicious attacker can intercept the Authorization Code, what prevents them from also intercepting the Access Token after it is exchanged?
Awarded Aug 4, 2025 at 18:59
how to define when a key (or a secret in general) has become too old?
Awarded Aug 4, 2025 at 7:07
Avoiding insecurities when generating passwords in bulk
Awarded Jul 30, 2025 at 18:51
Why not use the "age" tool for encrypted backups?
Awarded Jul 29, 2025 at 19:58
Can strtok()'s static buffer enable cross-container attacks in Kubernetes when containers share libc through copy-on-write?
Awarded Jul 28, 2025 at 12:20
Can I skip verifying server CA in mTLS if I don't need request confidentiality nor response integrity?
Awarded Jul 25, 2025 at 10:37
Securing OpenSSL for my Android project
Awarded Jul 25, 2025 at 0:48
Doesn't SSH tunnelling encrypt data packets?
Awarded Jul 20, 2025 at 22:36
Kerberos kinit password: what is it used for? Cryptographically?
Awarded Jul 19, 2025 at 2:02
How do I safely backup data and secure my accounts when my phone has been compromised?
Awarded Jul 17, 2025 at 9:53
Is there any security risk in using untrusted data-only eSIM?
Awarded Jul 16, 2025 at 15:47
Can't MITM be performed on U2F during registration?
Awarded Jul 14, 2025 at 15:50
1
2 3 4 5
…
307