РазведкаОригинал на английском
NIST and CISA finalize playbook to stop token theft and forgery
Русский перевод готовится и скоро появится на сайте. Пока доступен оригинал на английском.
NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR 8587), explains how agen
Help Net Security··3 мин чтения
NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR 8587), explains how agencies and cloud providers can strengthen key management, token verification, and token lifecycle controls. It also covers how identity providers and authorization servers should be designed and managed. “This publication provides implementation considerations for … More → The post NIST and CISA finalize playbook to stop token theft and forgery appeared first on Help Net Security.