3 ms·
Do you think there would be value in accepting HTTP requests and then automatically and immediately expiring every credential that ever gets passed over plain H
by carbocation 14y ago
Do you think there would be value in accepting HTTP requests and then automatically and immediately expiring every credential that ever gets passed over plain HTTP?
- deleted 14y ago[deleted]
- tptacek 14y agoWith an API, I think you're better off just not accepting HTTP connections to begin with. This is library design, so, principle of least astonishment. Break hard and fast.