4 ms·
> I can't think of a good reason why code in any well-behaved application should be allowed to make random outbound network calls If your application implement
by jsty 9y ago
> I can't think of a good reason why code in any well-behaved application should be allowed to make random outbound network calls
If your application implements webhooks, then there's a valid use case? I'm in complete agreement however that you should default to deny and open up as required.
- hathawsh 9y agoFor security, you should call outbound webhooks using a server dedicated to that purpose, where the main server and webhook caller are connected through an async message passing system such as RabbitMQ. That way you can maintain strict firewall rules on the main server.
- anthony_barker 9y agoAws Sqs write only queue for external facing servers is what we do. What worries me is not servers... It's admin/Dev machines...