3 ms·

The default is to send your private key in plaintext to the redirector.

• sthatipamala 14y ago
  SSL was added recently so it's not the default for now. Thanks for calling us out on this, we'll switch to HTTPS/SSL as the default in coming updates. To enable encryption right now, please see https://www.getbridge.com/docs/gettingstarted/js/advanced https://www.getbridge.com/docs/gettingstarted/js/advanced
  • mcguire 14y ago
    Wait. "The default is to send your private key in plaintext to the redirector." What?
    • folz 14y ago
      Your private API key, not your private SSH key.
      • koko775 14y ago
        That clarifies that it's not a good idea, actually. A secure exchange would involve the server issuing a challenge, and the client producing a response, and not sending the key at all.