3 ms·

I have not seen him mentioning that the web service is apparently invoked over unsecure http. You can still add authentication, but if the service is running ov

I have not seen him mentioning that the web service is apparently invoked over unsecure http. You can still add authentication, but if the service is running over http yu might as well not have any authentication at all.

empthought 9y ago
In theory you could encrypt the payloads via some other means and use something like HTTP digest authentication, but I'm sure that's not what happens here.
alasdair_ 9y ago
>I have not seen him mentioning that the web service is apparently invoked over unsecure http. It's mentioned. From the blog post: "besides the ugliest formatting ever and the fact the request uses plain HTTP"