"Smelting number into gold NoSQL pilot three" Redis usage scenarios and case studies

Source: Internet
Author: User
Tags oauth string back

Verify Redis's master-slave replication and capture the experimental process

Copying a configuration file

Change the port and associated master configuration for slave

Master-slave replication test

What is the purpose of studying the "number of times" nonce in OAuth? How to use? Familiarize yourself with the whole process of OAuth

The nonce, a random confusing string, is used only once for the number. Nonce is used to defend against replay attacks and select plaintext attacks.

Use:

A nonce of random numbers generated by the server, which is sent back to the client the first time the client requests the page;

The client gets the Nonce, concatenates it with the user's password and makes non-reversible encryption (MD5, SHA1, and so on), and sends the encrypted string back to the server with the username, Nonce, and encryption algorithm name;

The server uses the received username to search for the password, encrypts it with the same algorithm that the client uses, and then compares it to the encrypted string that the client submits, if the two strings are consistent, indicating that the user is valid.

This solves the problem that the user password plaintext is stolen, even if the attacker knows the algorithm name and nonce can not decrypt the password.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.