HTTPS

A C T

Sascha Block2024-07-12T15:34:22+02:00Tags: Access Tokens, Authentication systems, Compromised tokens, CORS, Data misuse, Digital security, Direct access, Fast response, HTTPS, Long-term risk, Longevity, Management strategies, mobile apps, OAuth 2.0, OpenID Connect, Refresh Tokens, Resource access, Safe storage, Security architecture, Security management, Security risks, Service life, Short life, Token binding, Token renewal, Token validation, User data, Web applications|

What is an access token? Access tokens are digital keys that allow a client access to protected server resources as soon as a user is successfully authenticated. You should definitely be familiar with these tokens as an integral part of the OAuth 2.0 specification, as they are used for secure authorization. Learn more about software development and IT security now...

Jetzt weiterlesen

Compromised CA Keys, Revoked Certificates – How Do We Verify That Revocation Really Works

Sascha Block2026-11-02T17:49:45+01:00Categories: IT Security|Tags: Auditability, Browser Security, CA Bundle, Certificate Authorities, Certificate Authority, Certificate Chains, Certificate Forgery, Certificate Revocation, Certificate Revocation List, Certificate Transparency, Certificate Validation, Code Signing, Code Signing Certificates, Compromised CA Keys, Compromised Private Keys, CRL, Cryptographic Keys, Cryptographic Vulnerabilities, CT Logs, curl, Cybersecurity, CycloneDX, digital certificates, Digital Signatures, Digital sovereignty, Digital Trust, eMudhra, eMudhra Security Incident, Git, Git-native Evidence, HTTPS, Identity Spoofing, Intermediate CA, IT Security, JetBrains, Key Generation, MacOS, Malware, Man-in-the-Middle, MITM, OCSP, Open Source Security, PKI, Public Key Infrastructure, Reproducible Security Testing, Revocation, Root CA, Root Store, Rust, rustls, rustls-webpki, SBOM, Secure by Design, Security Evidence, Security-by-Design, Software Signatures, Software Supply Chain, Supply Chain Security, TLS, TLS certificates, TLS Trust Validation, Trust Anchor, Trust Store, webpki-roots, Website Impersonation, X.509, Zero Trust|

Compromised CA Keys, Revoked Certificates - How Do We Verify That Revocation Really Works - eMudhra Security Incident: Eight compromised CA keys raise a fairly fundamental question for many of us in October 2026: "What's the point of revoking a certificate if applications keep trusting it anyway?"

Jetzt weiterlesen

Token for authentication – Access Token, Refresh Token and Bearer Token

Sascha Block2024-07-20T17:41:14+02:00Categories: IT Security|Tags: Access Tokens, Authentication systems, Compromised tokens, CORS, Data misuse, Data security, Data security, Digital security, Direct access, Fast response, HTTPS, IT Security, Long-term risk, Longevity, Management strategies, mobile apps, OAuth 2.0, OpenID Connect, Refresh Tokens, Resource access, Safe storage, Security architecture, Security management, Security risks, Service life, Short life, Token binding, Token renewal, Token validation, User data, Web applications|

Are you familiar with the tokens for authentication? You should definitely know the differences between Access Token, Refresh Token and Bearer Token! We explain to you in easy-to-understand terms what is important to protect your data effectively...

Jetzt weiterlesen

Diese Website verwendet Cookies und Dienste von Drittanbietern. Hier findest Du Deine individuellen Datenschutz-Einstellungen Ok Individuelle Einstellungen

Cookies von Drittanbietern

YouTube
Facebook
Flickr
X
Custom Tracking Code