3 ms·

Publicly accessible API then.

• saiya-jin 10y ago
  this is not an advantage then, you don't need to be a seasoned architect to see all kinds of potential issues with publicly exposing these APIs, even with proper security. I mean this is the core of every bank, not some application X storing some small subsets of crucial data. Best and easiest security to achieve and maintain is no public access at all (something like physically separated networks vs authenticated ones)
  • jhuckestein 10y ago
    All banks in the EU will have to offer APIs in 2017 because of PSD2: http://www.out-law.com/en/articles/2015/january/key-features-of-psd2-and-what-they-mean-for-the-payments-industry/ http://www.out-law.com/en/articles/2015/january/key-features... The alternative to open APIs is that third parties ask customers for online banking passwords. This practice is significantly less secure than, say, OAuth2 or similar and is generally against a bank's TOS, which makes the customer liable.