Sometimes I have doubts while asking question or answering question, if the question is really about information security. Especially when they seem as a cryptography or malware analysis, or computer network questions. Some questions are even directly depended on mathematics.
I can easily understand questions like: What are the security risks of logging the hash of rejected passwords? belong to security.exchange. But some of the questions make me doubt.
For example this question: https://crypto.stackexchange.com/questions/60544/breaking-a-small-scale-example-diffie-hellman, which has been migrated from security.exchange. From my point of view, it should even be question of math.stackexchange.
Another example: Why can a man-in-the-middle attack not happen with RSA? . It s direclty about the cryptographic theory of RSA. But is it in topic since it is about applications of cryptography?
Or Overflowing the buffer yet not jumping to address, is not it related to reverse engineering?
Furthermore, there are some questions about network protocols, network tools, pen testing-tools. There are many questions related to 'nmap' and its usage. The topics are very close to each others and they are often discussed together. They are very related to each others. That's why it is very difficult for me to categorize them clearly.
Briefly, I want to have a sort of questions, that I can ask myself to decide if a question is belong to security.exchange. Therefore, I can answer or ask a question without having doubt of out off topic. What I want to ask is which questions should I ask myself to state if a question is belong to here or somewhere else?