3 ms·
I gathered the target group are developers. Devs should be capable of dealing with this if they want higher security.
by gyre007 10y ago
I gathered the target group are developers. Devs should be capable of dealing with this if they want higher security.
- bgidley 10y agoEven dev's can't cope. Most apps leak credentials severely. You need integratity verification, obfuscation and whitebox crypto to do this sort of thing securely. All of that is available in the banking world and is often deployed by people like Irdeto (who I work for) and Arxan etc.
- gyre007 10y agoIs that why irdeto.com does not use SSL on their site? Because you're not willing to manage SSL certificates?
- jessaustin 10y agoWow it doesn't even redirect 443 it just hangs...
- komali2 10y agoThis illustrates a question for my I've been wondering for a while - while each developer on a project should have a good idea of security best practice, is it worth it for each to be an expert in security? I've always felt that there should be a member (or team, depending on project scale) for each project who is a "security expert" and can guide decisions for security best practice. So the developers can be aware that they need to tie in an API key at some point, and the security expert can guide the best way to implement that.