Difference between revisions of "Security notes / Unsorted"
From Helpful
m (→"Is it important to use a VPN?") |
m (→"Is it important to use a VPN?") |
||
| Line 25: | Line 25: | ||
=="Is it important to use a VPN?"== | =="Is it important to use a VPN?"== | ||
<!-- | <!-- | ||
| − | + | ||
| + | Sometimes useful. Rarely very important. | ||
The VPN sponsored ads you've seen lately are leaning heavily on the "overheard in public" kind of fear. | The VPN sponsored ads you've seen lately are leaning heavily on the "overheard in public" kind of fear. | ||
Revision as of 15:44, 7 July 2020
| Security related stuff.
Practical
|
| This article/section is a stub — probably a pile of half-sorted notes, is not well-checked so may have incorrect bits. (Feel free to ignore, fix, or tell me) |
Contents
Is it important to use a password manager?
"Is it important to use a VPN?"
Challenge/response
JSON Web Signature, Encryption, Tokens
| This article/section is a stub — probably a pile of half-sorted notes, is not well-checked so may have incorrect bits. (Feel free to ignore, fix, or tell me) |
JSON Web Signature (JWS)
Signing arbitrary data.
See also:
JSON Web Encryption (JWE)
Syntax for the exchange of encrypted data, and sending it in Base64 within JSON.
See also:
JSON Web Tokens (JWT)
JWT is aimed at sending verifiable claims, building on JWS or JWE
Signed using a shared secret, or a public/private key.
Typically used between identity provider and a service provider, in an SSO-like way.
See also:
-->
