security Archives - Page 3 of 4

Disable browser ‘Save Password’ functionality

One of the joys of working for a government healthcare agency is having to deal with all of the paranoia around dealing with ...

May 6, 2022
0 Comments

If you can decode JWT, how are they secure?

If I get a JWT and I can decode the payload, how is that secure? Couldn’t I just grab the token out of ...

May 4, 2022
0 Comments

Fundamental difference between Hashing and Encryption algorithms

I see a lot of confusion between hashes and encryption algorithms and I would like to hear some more expert advice about: When ...

May 2, 2022
0 Comments

What is the best way to implement “remember me” for a website? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers. Want to improve this question? Update the question so ...

May 2, 2022
0 Comments

What is token-based authentication?

I want to understand what token-based authentication means. I searched the internet but couldn’t find anything understandable. 8 s 8 I think it’s ...

May 1, 2022
0 Comments

JWT (JSON Web Token) automatic prolongation of expiration

I would like to implement JWT-based authentication to our new REST API. But since the expiration is set in the token, is it ...

April 30, 2022
0 Comments

Authentication versus Authorization

What’s the difference in context of web applications? I see the abbreviation “auth” a lot. Does it stand for auth-entication or auth-orization? Or ...

April 27, 2022
0 Comments

How can bcrypt have built-in salts?

Coda Hale’s article “How To Safely Store a Password” claims that: bcrypt has salts built-in to prevent rainbow table attacks. He cites this ...

April 26, 2022
0 Comments

Are HTTPS headers encrypted?

When sending data over HTTPS, I know the content is encrypted, however I hear mixed answers about whether the headers are encrypted, or ...

April 26, 2022
0 Comments

Why Does OAuth v2 Have Both Access and Refresh Tokens?

Section 4.2 of the draft OAuth 2.0 protocol indicates that an authorization server can return both an access_token (which is used to authenticate ...

April 22, 2022
0 Comments