Collaborate Disseminate
I’m adding password protection/encryption support to a Python package that makes ZIP files (https://github.com/uktrade/stream-zip). I’m opting to not add ZipCrypto support, but instead add WinZip-style AES
From https://www.winzip.com/en/su… Continue reading WinZip AE-2 for small files and AE-1 for larger – how small/how large for each? [closed]
Looking over the spec for JSON Web Signature (JWS), I realise that it doesn’t seem to specify anything that is HTTP-specific in terms of the payload. Specifically, signing HTTP headers and bodies (say, so a server can verify certain HTTP h… Continue reading Signing HTTP requests with JWS
For a HTTP(S) API, which is better (/ which is better under which circumstances)?
Hawk authentication (a secret key is used to create a signature which is transmitted with the request: similar to AWS Signature v4)
API key a… Continue reading Hawk vs. API key authentication
I’m trying to work out how acceptable it is to commit KMS-encrypted API keys to source control. It is (I believe) often deemed acceptable to commit public keys to source control. So, to try to compare to this…
From an 2048… Continue reading 2048 bit SSH RSA public key vs AWS KMS-encrypted text in source control