4 ms·
request signing is strictly better... except that developers complain when you try to implement anything harder than an api bearer token (see recent threads on
by arccy 1y ago
request signing is strictly better... except that developers complain when you try to implement anything harder than an api bearer token (see recent threads on google gemini / vertex apis).
- TeMPOraL 1y agoShouldn't be surprising. Anything crypto tends to drag along a truckload of extra complexity you don't want to (and shouldn't) care about, and some of that is non-obvious. TLS alone, for example, makes your app depend on a globally synchronized wall-time clock - and what you thought of as self-contained script now needs ongoing operations work to keep the crypto parts from breaking over time.