Encryption is not Binary

If you ask someone if they require encryption on their device, first of all, you will likely get one of…

Read More »

Mutual Problems

The HTTPS protocol is the well-established standard for securing our connections. Understanding how this protocol works is not a problem…

Read More »

Skip SSL certificate verification in Spring Rest Template

How to skip SSL certificate verification while using Spring Rest Template? Configure Rest Template so it uses Http Client to…

Read More »

TLS Client Authentication

I decided to do a prototype for an electronic identification scheme, so I investigated how to do TLS client authentication…

Read More »

Theft-Proof Java EE – Securing Your Java EE Enterprise Applications

Øredev is just a couple of days away, and I was invited to give two presentations. One of them is…

Read More »

Why You Should Encrypt ALL Personally Identifiable Information (PII)

Many critics have pointed out that Ashley Madison should have encrypted all personally identifiable information (PII). The database contained sensitive…

Read More »

Top 10 Lists for Designing and Writing Secure and Safe Software

If you care about writing secure code, should know all about these Top 10 lists: OWASP Top 10 The OWASP…

Read More »

Implementing Client-Side Row-Level Security with jOOQ

Some time ago, we’ve promised to follow up on our Constraints on Views article with a sequel showing how to…

Read More »

How to Keep REST API Credentials Secure

If you are building mobile apps then you are connecting to some REST API. For example, if you want to…

Read More »