Stack Overflow
Stack Overflow

Questions tagged [confidential]

17 questions
8
votes
2 answers

Is it possible to make confidential issues in a public git repository?

I would like to keep both public and private issues in my team's github repo. I'd rather prefer that some issues are not open to other people than just my teamates.
kirrikirri
  • 121
  • 2
  • 4
3
votes
3 answers

Azure SGX support

I'm trying to use SGX on Windows Azure as shown in this article Introduction to Azure Confidential Computation. But I think SGX it is no longer supported by Azure. Is there any other way to run SGX applications on cloud rather than Azure?
0x3bfc
  • 2,715
  • 1
  • 16
  • 20
1
vote
0 answers

Keycloak - use authorized API resources with public client

Using a Vue SPA with Keycloak as IAM to connect API of various microservices. The user can be login to Keycloak with Authorization PKCE Code Grant Flow with a public client (no client-secret on the browser). It is used the official JavaScript…
Claudio Barca
  • 21
  • 1
1
vote
1 answer

How to write Confidential/SGX apps with Golang?

I would like to develop and deploy my Go microservices as SGX-/Confidential Computing app. What are the requirements?
jayare
  • 33
  • 2
1
vote
1 answer

How can I deploy SGX apps on Kubernetes?

I recently learned that Intel SGX processors are able to encrypt enclaves for persistent storage to disk. After this, I started to write my first SGX apps and now I am wondering if there is any opportunity to deploy them on Kubernetes?
jayare
  • 33
  • 2
1
vote
1 answer

Setup SSL for form login only on Tomcat webapp

Can I set Tomcat (or my webapp if it's done that way) to require SSL for confidentiality of the built-in Form-Based Login mechanism? i.e. to protect the users credentials, and use standard http for any other transactions?
brabster
  • 42,504
  • 27
  • 146
  • 186
1
vote
2 answers

anonymous and confidential app design

I presently have two twin apps, TellMeStraight and SuggestionDrop which work but with a small flaw about which this question is directed. The two apps are identical except that some of the wording of TellMeStraight is oriented to a communication…
zerowords
  • 2,915
  • 4
  • 29
  • 44
0
votes
1 answer

Security type of confidential VM with Terraform in Azure

For a school project, we are currently trying to set up an AMD SEV confidential VM utilizing Terraform with Azure. However, we cannot find any documentation on how to create a confidential VM within this environment. Presumably, we should be able to…
Kabuto
  • 3
  • 3
0
votes
1 answer

The best approach to check if file has been modified in c#

So I have an app I am required to store the user login info locally using a text file , is windows file system watcher a good approach .The data inside the text files are well encrypted, and I tried to check the files using windows archive but…
Zhir Barzan
  • 3
  • 2
0
votes
1 answer

spring boot rest app secured by keycloak 18 return always error 401 Unauthorized

I'm developing microservices some of them with spring boot web and other with spring boot data rest and I want secure them with keycloak server 18 through OpenId protocol. The microservices endpoint can be accessed from frontend adding in the…
n3o
  • 69
  • 1
  • 2
  • 11
0
votes
0 answers

How can I run apps inside an Intel SGX enclave on the Windows

everyone. I have created a DCsv3 virtual machine in Azure on Windows. How can I run the application from inside an Intel SGX enclave?
Nabi
  • 1
  • 3
0
votes
1 answer

Disable HTTPS GET certificate check

My Class: func getUsers() { guard let url = URL(string: "https://localhost:5001/Zona/User") else {return print("ERROR")} let urlRequest = URLRequest(url: url) let dataTask = URLSession.shared.dataTask(with: urlRequest) { (data,…
danrom11
  • 27
  • 6
0
votes
0 answers

How to authenticate a confidential Keycloak client API consumer without consumer's password nor sharing client secret?

We have an application defined as a confidential client in Keycloak (it is a web application needing login authentication, but also its APIs consumers authentication). How can our client authenticate the API consumer without sharing our client…
Magalo
  • 1
  • 1
0
votes
1 answer

Encrypting text data methodology

I'm developing a journal web app and am trying to tackle what I foresee as the biggest problem - trusting me not to read other people's entries. The solution I have so far is: User gives a secret key each time they login. It is not stored with…
Ross
  • 46,186
  • 39
  • 120
  • 173
0
votes
1 answer

How to save confidential data on iOS? Keychain or Outh2? Thanks.

As you know many apps use keychain to save user login name and password, but is it really safe? especially on device jail break mode. So another solution is to use Outh2 protocol to save those confidential infomation on server side which needs many…
jianhua
  • 1,011
  • 1
  • 12
  • 28
1
2