🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Authentication

Matthias Schmidt

Published on 22.06.2026 in the category Web Application Security published.

security.txt - How security researchers report vulnerabilities securely

Without clear reporting paths, vulnerabilities remain risky. A standardized security.txt provides security researchers with crucial information for contacting the affected parties. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Ethical Hacker Information Security Ransomware Responsible Disclosure Vulnerability Management Vulnerability Disclosures Vulnerability Scan Secure Coding Security Concepts Threat Modeling Company Web Application Zero-Day-Exploits

Hannah Schneider

Published on 21.10.2021 in the category Web Application Security published.

The New OWASP Top 10 - 2021

The OWASP Top 10 - 2021 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) DDoS OWASP Secure Coding SQL Injections Threat Modeling Web Application

Moritz Kaumanns

Published on 23.07.2020 in the category Communication Security published.

FIDO2 and WebAuthn: Login without a Password

FIDO2 and WebAuthn allow a secure and phishing-resistant authentication for web services in order to avoid data leakage. (read more)

Authentication Authorization • Access Control Challenge-Response Procedure Data Theft FIDO2 Social Engineering Social Hacking Spear Phishing WebAuthn Two-Factor Authentication (2FA)

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Regina Okun

Published on 18.09.2018 in the category Web Application Security published.

PHP Security Podcasts on phpdevradio.de

In PHPDevRadio "The Podcast for PHP", Michael Döhler (PHPDevRadio Crew) and Andreas Sperber (aramido) talk about current PHP security topics (read more)

Regina Okun

Published on 19.06.2018 in the category aramido published.

PHP Secure Coding Training: aramido launches external seminar offerings

Following the great success of the PHP Secure Coding training as an in-house seminar, the training can now also be booked as an external seminar. (read more)

Authentication Authorization • Access Control Brute Force Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Hardening Cryptology • Cryptography Live Hacking Secure Coding Session Hijacking Session Management Training Workshop Event

Regina Okun

Published on 15.02.2018 in the category Communication Security published.

What is Payment Diversion?

Two internet giants fell for the Payment Diversion scam – could the same thing happen to your company? (read more)

Authentication Best Practice Guide E-Mail Hardening Social Engineering Company

Andreas Sperber

Published on 21.07.2017 in the category Communication Security published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption

Andreas Sperber

Published on 21.03.2017 in the category Communication Security published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509

Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits