Collaborate Disseminate
In this question I asked about how to handle situations when SHA-256 hashes are not available for a file downloaded from the internet that contains executable code. Another community member insightfully asked if a hash is really needed to… Continue reading If a file is digitally signed, is posting a hash very useful for security purposes?
In this question I asked about how to handle situations when SHA-256 hashes are not available for a file downloaded from the internet that contains executable code. Another community member insightfully asked if a hash is really needed to… Continue reading If a file is digitally signed, is posting a hash very useful for security purposes?
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
I have the below XML,
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<Response xmlns="http://www.site.ae/g">
<Message xml:id="message">
<Header>
… Continue reading Verifying Signed Xml Generated From Java In NET [migrated]
NIST stipulates that you shouldn’t pass trusted or untrusted data directly into an event handler, interpreter or compiler.
You should store the value in a separate field and let your handler pull the value out.
Providing validation is perf… Continue reading Validating input in-line or from a seperate field?
Say I have a continuously upgraded and well maintained LAMP environment with a website which its CMS is all-core and continuously upgraded as well and I have created a simple backend HTML contact form which is CMS-agnostic (not a module of… Continue reading Is it true that frontend validation is generally redundant for minimalist contact forms on minimalist environments?
I’ll formulate my question in regards to timestamped PDF, but I wonder actually about the long term validation of RFC3161 tokens in general.
So, PAdES has the concept of Long Term Validation, which means (correct me if I’m wrong), that a d… Continue reading What’s the merit of storing LTV (long term validation) information for RFC3161 tokens and what happens if a TSA private key would leak?
I can succesfully validate newly generated email adress (check if mx record exist) if it’s a Gmail, but when checking Hotmail adress I get the following:
b’550 5.7.1 Service unavailable. Client host 23.129.xx.xxx blocked using Spamhaus.
I … Continue reading Email validation blocked by Spamhaus