NYCrb / devpunks

http://devPunks.com modern development site for podcast & youtube videos
MIT License
15 stars 1 forks source link

[Talk Proposal] Developing Security Features with MessageEncryptor and MessageVerifier #51

Closed mjc-gh closed 1 year ago

mjc-gh commented 5 years ago

I would like to do a security minded talk about MessageEncryptor and MessageVerifer. This talk will cover:

  1. An overview of these two classes, how they work, and what they provide for. I will explore the difference between encrypting and signing a message and the security guarantees these two classes provide. I'll also showcase some the latest features of these classes including the new metadata features.
  2. Next I'll show how we at Knotch used MessageEncryptor to build a more robust authentication and authorization system for our Sidekiq Enterprise Web UI.
  3. Lastly, we'll explore other features that could be implemented using these classes including "remember be" login cookies and signed, self-expiring URLs for resource downloads.
mjc-gh commented 5 years ago

I'm very flexible on dates if this talk were to be accepted. Thanks!

dmitrinesterenko commented 5 years ago

@mikeycgto this talk is perfect. You're confrimed for October 9th. Does that date work for you?

mjc-gh commented 5 years ago

@dmitrinesterenko sounds great! I'm looking forward to it!!

7urkm3n commented 5 years ago

Hi @mikeycgto, is there way to see the presented slideshows online?

snuggs commented 5 years ago

ping @mikeycgto

mjc-gh commented 5 years ago

Apologizes @snuggs and @7urkm3n, here are my slides: https://www.dropbox.com/s/lsxxfghfxbaa6nn/NYC-Ruby-Oct-Security-Talk.key?dl=0