Direct, authoritative definitions and technical mechanisms for core computer science concepts, web security models, cryptographic primitives, and internet protocols. Each entry highlights explicit entity relationships and companion developer tools.
Essayez de rechercher des acronymes comme JWT, CORS, CSP ou des termes généraux comme Hash, Salt ou DNS.
A fundamental browser security mechanism that restricts scripts loaded from one origin from inspecting or mutating the Document Object Model (DOM) and reading responses from another origin.
An HTTP-header-based security protocol that instructs web browsers to allow front-end JavaScript running at one origin to access restricted resources on a server hosted at a different origin.
An HTTP response header and defense-in-depth security layer that restricts the domains and resource types (scripts, styles, images, iframes) a web browser is permitted to load and execute for a given page.
A web security vulnerability that enables attackers to inject malicious client-side JavaScript into web pages viewed by other users, compromising session tokens, DOM data, and user identity.
An attack that tricks an authenticated user's browser into transmitting unauthorized state-changing HTTP requests to a vulnerable application using the victim's active session cookies.
A compact, URL-safe container format for encoding JSON objects as cryptographically signed (JWS) or encrypted (JWE) tokens exchanged between distributed systems.
A security credential that grants access to protected resources to any party possessing ("bearing") the token string, without requiring proof of cryptographic key ownership.
An open-standard authorization framework that enables third-party applications to obtain limited access to protected HTTP resources on behalf of a resource owner without sharing user credentials.
A deterministic mathematical algorithm that maps arbitrary-length binary inputs to a unique, fixed-size output string (digest) with pre-image resistance and collision resistance.
A cryptographic property where a minor modification in the input (such as flipping a single bit) causes a drastic, unpredictable transformation in approximately half of the output bits.
A unique, cryptographically random sequence of bytes concatenated with a password or credential prior to hashing to ensure that identical passwords produce completely different hash digests.
An arbitrary number or byte string intended to be used only once within a cryptographic communication to protect against replay attacks and ensure encryption uniqueness.
A cryptographic paradigm where the exact same secret key is utilized for both encrypting plaintext into ciphertext and decrypting ciphertext back into plaintext.
A cryptographic system utilizing mathematically linked pairs of keys: a public key that can be distributed openly to anyone, and a private key kept strictly confidential by the owner.
A comprehensive framework of hardware, software, policies, and Certificate Authorities that manages, issues, and validates digital certificates to securely bind public keys to entities.
A property of certain HTTP methods where executing the exact same request multiple identical times produces the identical server-side state as executing it once.
An automated HTTP OPTIONS request sent by web browsers before a cross-origin request to verify whether the server authorizes the target method, custom headers, and origin.
An HTTP response header providing an opaque identifier (hash or version fingerprint) assigned by a web server to represent a specific version of a resource.
A cryptographic protocol operating above the transport layer (TCP) that provides end-to-end encryption, data integrity, and server authentication for internet communications.
A decentralized, hierarchical naming system that translates human-readable domain names (such as curious-techie.com) into machine-routable IP addresses (such as 192.0.2.1 or 2001:db8::1).
A numerical counter or duration field indicating how long a data unit (such as a DNS record or an IP packet) remains valid before being discarded or re-queried.
A DNS resource record type that maps an alias domain name to another canonical (true) domain name rather than directly to an IP address.
A binary-to-text encoding scheme that translates raw 8-bit binary octets into a sequence of 64 printable ASCII characters, ensuring safe transport across text-only protocols.
A standardized 128-bit numerical label used to uniquely identify objects across distributed computer systems without requiring centralized coordination.