3 ms·
What's the stance on security for handling private tokens/cookies/sessions/etc?
by 383toast 2y ago
What's the stance on security for handling private tokens/cookies/sessions/etc?
- richardzhang 2y agoThis is certainly an important question. We use a third-party vault to store tokens/keys.
- mormegil 2y agoMy first thought. Do I understand correctly that the HAR with all my session cookies, username&passwords&etc (not mentioning possibly sensitive data in the service) is sent to OpenAPI? Well… just… be aware of it if you want to try this.