Static Credentials Must Not Be Used In The Browser
Authentication is described in this post. Modern business web applications tend to be a collage of service calls to numerous[…]
Read moreMonth: August 2024
Datastore Security Requirements
This post will introduce a generic set of database / datastore security requirements that be used as a starting point[…]
Read moreApplication Front-Ends Must Not Make Authorization Decisions
First, let’s get the usual introductions out of the way. For an in-depth discussion of what Authorization is, check out[…]
Read more