Tag
authentication
- Sep 28, 2026 The Split Between Submission and Relay Ports Why port 587 exists separately from port 25, which policies differ between the two roles, and how a server distinguishes a user from a peer MTA. internet protocols
- Jul 19, 2026 Channel Binding: Tying an Authenticated Session to Its Transport How a protocol proves that the credential exchange it just performed happened inside this specific TLS connection, and why an unbound exchange is open to a relay in the middle. cryptography
- Apr 6, 2026 ID Tokens: Validating the Claims That Establish Who the User Is The claim set OpenID Connect adds to a JWT, the ordered checks a client must perform, and why a valid signature is the least interesting part of validation. internet protocols
- May 30, 2025 Secure Debug Lifecycle: Authentication, Locked Ports, and Recovery How a debug port is gated by device life-cycle state and certificates, what an open port exposes once keys are readable, and why the lock is one-way once the device ships. embedded systems
- Aug 29, 2024 SRTP Key Derivation and Per-Packet IV Construction How one master key produces separate encryption, authentication, and salting keys, and why the packet index rather than the sequence number feeds the counter block. internet protocols
- May 23, 2024 Session Fixation, Rotation, and Revocation Why authenticating in place hands an attacker a valid session, how rotation must be sequenced to survive concurrent requests, and what revocation can and cannot reach. backend systems
- May 8, 2024 Credentials on the Wire and Identity Squashing The client asserts who the caller is on every request, and the server decides whether to believe it. That decision is where network filesystems diverge from local permission checking, and where the root account becomes the recurring problem. filesystems