4 ms·
If things should be secure, they should be behind authentication and authorization for that content. To argue about what is the best ID to be used is just tryin
by goshx 9y ago
If things should be secure, they should be behind authentication and authorization for that content. To argue about what is the best ID to be used is just trying to fix what is not broken, IMHO.
- quickthrower2 9y agoSecurity is multi layered.
- scrumption 9y agoObscurity is not a security layer.
- Someone1234 9y agoSo a password or private encryption key isn't security?
- deleted 9y ago[deleted]
- rurounijones 9y agoObscurity is a perfectly fine security layer as you said yourself (i.e. it is one of many layers). Relying ONLY on obscurity is a failure.
- pluma 9y agoWhat is a UUID if not a fairly predictable object-based shared authorization token? EDIT: I'm mostly kidding.
- quickthrower2 9y agoJust call it an object-specific API key, that forms part of the URI instead of being a header value. Since we are using https it's all good.