Difference between revisions of "Security notes / Unsorted"

From Helpful
Jump to: navigation, search
m ("Is it important to use a VPN?")
m ("Is it important to use a VPN?")
 
Line 25: Line 25:
 
=="Is it important to use a VPN?"==
 
=="Is it important to use a VPN?"==
 
<!--
 
<!--
Mostly not.
+
 
 +
Sometimes useful. Rarely very important.
  
 
The VPN sponsored ads you've seen lately are leaning heavily on the "overheard in public" kind of fear.
 
The VPN sponsored ads you've seen lately are leaning heavily on the "overheard in public" kind of fear.

Latest revision as of 16:44, 7 July 2020

Security related stuff.

Practical


Theory


Unsorted


This article/section is a stub — probably a pile of half-sorted notes, is not well-checked so may have incorrect bits. (Feel free to ignore, fix, or tell me)


Is it important to use a password manager?

"Is it important to use a VPN?"

Challenge/response

JSON Web Signature, Encryption, Tokens

This article/section is a stub — probably a pile of half-sorted notes, is not well-checked so may have incorrect bits. (Feel free to ignore, fix, or tell me)

JSON Web Signature (JWS)

Signing arbitrary data.

See also:


JSON Web Encryption (JWE)

Syntax for the exchange of encrypted data, and sending it in Base64 within JSON.

See also:


JSON Web Tokens (JWT)

JWT is aimed at sending verifiable claims, building on JWS or JWE

Signed using a shared secret, or a public/private key.

Typically used between identity provider and a service provider, in an SSO-like way.

See also:


-->