3 ms·

SSL was added recently so it's not the default for now. Thanks for calling us out on this, we'll switch to HTTPS/SSL as the default in coming updates. To enabl

SSL was added recently so it's not the default for now. Thanks for calling us out on this, we'll switch to HTTPS/SSL as the default in coming updates. To enable encryption right now, please see https://www.getbridge.com/docs/gettingstarted/js/advanced https://www.getbridge.com/docs/gettingstarted/js/advanced

mcguire 14y ago
Wait. "The default is to send your private key in plaintext to the redirector." What?
- folz 14y ago
  Your private API key, not your private SSH key.
  - koko775 14y ago
    That clarifies that it's not a good idea, actually. A secure exchange would involve the server issuing a challenge, and the client producing a response, and not sending the key at all.