Security & Cryptographic Trust Architecture
LinksSocial replaces blind trust with mathematical verification. Every posting, organization, and communication channel is validated against decentralized domain records and real-time fraud heuristics.
DNS TXT Handshake
Employers must prove authoritative domain control by publishing cryptographic tokens to their public DNS zone before posting opportunities.
Real-Time Quarantine
Automated tripwires instantly freeze postings receiving multiple fraud indicators, removing them from candidate feeds pending manual admin audits.
Role & Data Isolation
Candidate resumes and direct contact credentials remain shielded behind encrypted access tokens, preventing automated data scraping.
How Cryptographic Verification Works
A transparent look at our three-step organization verification pipeline.
Token Generation
A unique, cryptographically signed hash (`linkssocial-verify=...`) is generated specifically for your organization.
DNS Record Broadcast
The organization publishes this verification string as a standard TXT record on their apex or subdomain nameservers.
Automated Resolution
Our edge resolvers query public root servers directly. Upon cryptographic match, the organization receives the Verified Tier badge.
Zero-Trust Guarantees
No Unverified Recruiter Seats
Recruiter accounts require company email domain match or cryptographically verified team invitations.
Encrypted Credentials
Passwords hashed using high-cost bcrypt work factors; recovery tokens expire strictly within 60 minutes.
Anti-Phishing Chat Monitors
Real-time scanner detects external wire transfer requests, crypto wallets, and unverified redirect URLs.
Zero Data Brokerage
Candidate personal data is never sold, indexed by public search bots, or exposed without direct application consent.