4 ms·
Security and privacy shouldn't be based on hiding a plaintext string. What about the ISPs, browser history, and other leakage. S3 hosting of private images was
by alecco 17y ago
Security and privacy shouldn't be based on hiding a plaintext string. What about the ISPs, browser history, and other leakage.
S3 hosting of private images was a terrible idea. It doesn't provide any kind of protection.
- Terretta 17y ago> S3 ... doesn't provide any kind of protection. S3 offers privacy protections with the ability to require an expiring token in the URL. The theory is the web site should authenticate a user, and only generate a valid token for that user (for a fuzzy definition of "that" user) that works only for a limited time.