Loading…
Practical guides on the tools developers use every day — JSON, regex, JWT, cron, and more.
7 posts matching
Expired, self-signed, hostname mismatch, incomplete chain, wrong SAN — how to tell them apart fast and fix each one.
Time-based one-time passwords are just a shared secret plus the current time, run through HMAC. Here's the whole mechanism.
Fast hash functions are the wrong tool for passwords. bcrypt is deliberately slow and salted — here's why that matters.
SHA-1 is broken for security, SHA-256 is the default, SHA-512 is faster on 64-bit hardware. Here's when each one is the right call.
Decode JWTs safely, verify what you can client-side, and catch the claim mistakes that cause 401s.
Base64 is for binary-safe transport, not encryption. Here's when it helps — and the mistakes that leak data.
Length beats clever character rules. Here's how to generate strong passwords and store them correctly.