3 ms·
I suspect that the vendors keys got inadvertently leaked, and that stinks because ultimately the liability will be on the vendor and not Stripe. However what i
by m348e912 2y ago
I suspect that the vendors keys got inadvertently leaked, and that stinks because ultimately the liability will be on the vendor and not Stripe.
However what if Stripe could allow their customers (vendors) to limit what IP address(es) their API call could originate from? That would at least add an extra layer of security in the case an API key was leaked.
- ratg13 2y agoWhile Stripe seems like it could do many things better here, you can accomplish what you are suggesting by using a key vault.
- m348e912 2y agoFair point. E-commerce is not my area of expertise. That seems like the most elegant solution.
- yencabulator 2y agohttps://docs.stripe.com/keys#limit-api-secret-keys-ip-address https://docs.stripe.com/keys#limit-api-secret-keys-ip-addres...