Collaborate Disseminate
In the past few weeks I’ve seen periodic attempts of someone logging in to my linkedin accounts. They appear to use some sort of one time login link feature that linkedin has, which allows passwordless sign in if you know (and can access) … Continue reading Repeated passwordless login links from linkedin
In the past few weeks I’ve seen periodic attempts of someone logging in to my linkedin accounts. They appear to use some sort of one time login link feature that linkedin has, which allows passwordless sign in if you know (and can access) … Continue reading Repeated passwordless login links from linkedin
Here’s the deal. This might probably be a known best practice, but I haven’t been able to find anything on the matter.
Suppose company X has a public facing web API server, and a public OAuth Identity Server. Its clients will get a token f… Continue reading Using public OAuth tokens to authorize access to internal services
I recently had a conversation with a teacher who argued that in a digital certificate (x509), the public key is used to verify the name of the certificate holder.
From my understanding, there are actually 2 public keys at work in this sch… Continue reading Can public keys in digital certificates be used to verify name of certificate holder?