csp_dev

3 ms·

1.
Show HN: Credential Shield Protocol – Server-blind breach checking for passwords
2 points by csp_dev 9mo ago|0 comments
2.
by csp_dev 10mo ago
My open question to you both and others is this: In your view, is that "organizational compliance with minimal logging" use case substantial enough to warrant a new, standardized protocol? Or is it adequately served by either a)
3.
by csp_dev 10mo ago
You’ve summed it up perfectly. This is fundamentally about the trade-off between total privacy (local DB) and practicality (server query). The protocol exists only if that middle ground has real users. The compelling case might not be for i
4.
by csp_dev 10mo ago
You’ve summed it up perfectly. This is fundamentally about the trade-off between total privacy (local DB) and practicality (server query). The protocol exists only if that middle ground has real users. The compelling case might not be for i
5.
by csp_dev 10mo ago
Fully agree that broad, accurate discovery is the crucial first step. My point is about how we achieve the depth. The goal is deeper inspection through privacy-aware protocols like a scanner proving a login page is vulnerable without ever s
6.
Show HN: Building a future where security checks leave no permanent trails
1 points by csp_dev 10mo ago|5 comments
7.
by csp_dev 10mo ago
Congrats on the launch. Open-source ASM is desperately needed. Looking at this, I'm thinking about the evolution of the external attack surface. It's not just about finding assets anymore, but understanding their security postur