Encryption
5 articles filed under encryption.
- How to decode and verify a JWT A JWT is readable by anyone who holds it, and trustworthy only once its signature checks out. How the three parts work, what the claims mean, why signatures fail, and how to handle tokens safely. Engineering
- One-time secret vs one-time password: what is the difference? A one-time password is a login code that proves who you are. A one-time secret is a link that delivers a credential to someone else, once. Same name, opposite jobs. Concepts
- What is a one-time password link? A one-time password link sends a password or API key through a URL that self-destructs after it is read. How they work, and when to use one. Concepts
- How the key stays out of our database Everything after the # in a URL is never sent to the server. That one detail is the whole OOBSecret architecture. Security model
- Deleting is not the same as forgetting A row disappearing from a table is the easy part. Backups, replicas and write-ahead logs are where permanent deletion usually turns out to be a figure of speech. Engineering