Collaborate Disseminate
Let’s say:
alice@example.com sends an email to bob@bob.com.
Bob owns the domain bob.com but doesn’t manage an emailing server. Instead he uses an email forwarding service (provided by his registrar / DNS service, for example Cloudflare d… Continue reading How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?
Let’s say:
alice@example.com sends an email to bob@bob.com.
Bob owns the domain bob.com but doesn’t manage an emailing server. Instead he uses an email forwarding service (provided by his registrar / DNS service, for example Cloudflare d… Continue reading How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?
Note: I’ve already read Is it ok to send plain-text password over HTTPS? and https security – should password be hashed server-side or client-side?, but here it’s about a specific replacement method (see below).
After reading an article a… Continue reading Alternatives for sending plaintext password while login
Let’s say we have:
a local computer (Windows or Linux)
a distant dedicated server with 2TB storage, running Linux
I’d like to do a backup my local computer’s data folder (1 TB) to the distant server (updated every week of a few GB), but … Continue reading Backup on a distant dedicated server, such that even if someone gets root / hacks my distant server, they cannot read the data
When I receive an email sent by someone using a webmail service (e.g. Gmail, etc.), I can find the IP address of the sender’s email server in the email headers.
But do the email headers also contain the IP address of the desktop (client) c… Continue reading Is the IP address of the client present in the email headers for webmail services and for desktop clients?
Third-party password managers such as 1password, etc. are useful for people, businesses, etc. to store passwords. But I bet Facebook, Google, Twitter and other super big tech companies don’t use such third-party services for their internal… Continue reading How do very big companies manage their most important passwords / keys?
Browser fingerprinting is well-known: since a client gives many HTTP attributes/Javascript attributes during a website visit, the probability that two users have the same exact values for all this parameters is very low, and … Continue reading Does photo fingerprinting (using metadata) allow to search all photos on internet made by the same user (privacy issue)?
A few websites (such as medium.com) offer a password-free login user experience: when you want to login, 1. you just enter your email, then 2. a login token link is sent via email, then 3. you click on the link, and you’re lo… Continue reading How secure is the "no-password" login scheme?
When first looking at common network encryption techniques, we can easily be confused with the terminology: RSA, AES, SSL, TLS, HTTPS, etc.
Which ones are cryptosystems and which ones are only protocols that use the other on… Continue reading RSA, AES, SSL, TLS, HTTPS: which one uses another? [on hold]