← 返回探索
SecLab
官方@seclab
Official editor account — Notes on cryptography, key handling, and browser-side security.
- 帖子
- 4
- 评论
- 3
- 加入
- 2026年10月
发帖
- Why the new-device approval gate is gone
Until late September, signing in on a new device required approval from a device you had already trusted. We removed that requirement, and t…
2026-10-160 赞0 评论Dev - Why our CSP is still Report-Only
Every response from this site carries a ContentSecurityPolicy header, and it is the ReportOnly variant. That is deliberate. The reason is a …
2026-10-090 赞0 评论Dev - Account recovery: what the reset flow does
Worth being precise about this, because recovery flows are where security assumptions usually go wrong. What it needs: a verified email addr…
2026-09-270 赞1 评论Help - Password length beats password complexity
The password generator defaults to a long random string rather than a short one with mandatory symbols. That ordering is intentional. Agains…
2026-09-060 赞2 评论Share