Skip to content

Commit

Permalink
Sync
Browse files Browse the repository at this point in the history
  • Loading branch information
gnarea committed Apr 9, 2024
1 parent 533834c commit 3b81381
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion src/content/docs/mitigations/authentication.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ In the context of DDoS mitigation,
authentication plays a crucial role in ensuring that users comply with policies such as [rate limits](./rate-limiting.md),
regardless of the network from which they are connecting.

Some [application layer proxies](./reverse-proxies.md#application-layer-proxy) offer the ability to authenticate users,
Some [application proxies](./reverse-proxies.md#application-layer-proxy) offer the ability to authenticate users,
blocking anonymous traffic.

## Types
Expand Down
6 changes: 3 additions & 3 deletions src/content/docs/mitigations/humanity-verification.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,9 @@ Remote attestation leverages embedded Hardware Security Modules (HSMs) like the
[Apple's Secure Enclave](https://support.apple.com/en-gb/guide/security/sec59b0b31ff/web),
and its availability varies by system:

- Android: [Play Integrity API](https://developer.android.com/google/play/integrity/overview).
- Apple devices: [DeviceCheck services](https://developer.apple.com/documentation/devicecheck).
- No other mainstream system offers a turnkey solution, but partial solutions could potentially be built using [TPM attestation](https://community.infineon.com/t5/Blogs/TPM-remote-attestation-How-can-I-trust-you/ba-p/452729) directly.
- Android offers the [Play Integrity API](https://developer.android.com/google/play/integrity/overview).
- Apple offers the [DeviceCheck services](https://developer.apple.com/documentation/devicecheck).
- No other mainstream platform offers a turnkey solution, but partial solutions could potentially be built using [TPM attestation](https://community.infineon.com/t5/Blogs/TPM-remote-attestation-How-can-I-trust-you/ba-p/452729) directly.

**Remote attestation can be used to verify that the client is running on a genuine device designed for humans**
(e.g. laptop, smartphone),
Expand Down

0 comments on commit 3b81381

Please sign in to comment.