3 ms·
Yeah I should do the https thing. At least makes the transfer secure. I already do a bit of random strings. Try sharing a drawing, the link it produces include
by zhyder 18y ago
Yeah I should do the https thing. At least makes the transfer secure.
I already do a bit of random strings. Try sharing a drawing, the link it produces includes a 16character code that must match for the sharee to be able to access the drawing.
- tptacek 18y agoIt doesn't really add any meaningful security. The real security issues with your app are going to be in your code, not on the wire. But it's a strong psychological signal. It's the same with the random IDs. Generate UUIDs with SHA1 or something, and make them show up in the URL bar. The signal is, "there's no simple integer counter here where if I incr it, I get some other customer's data".