4 ms·
A "simple" transport medium won't prevent security issues itself (you can run PPP over RS-232), but it will force you to define a fairly minimal API, which is p
by iso8859-1 14y ago
A "simple" transport medium won't prevent security issues itself (you can run PPP over RS-232), but it will force you to define a fairly minimal API, which is possible with HTTP too.
Notice how all these leaks were not because of HTTP server security issues or the like, but because the critical parts of the application were not isolated.
No need to force obscure interfaces, just add an extra NIC and connect the critical part over Ethernet.
- chmike 14y agoYou are right. A different strategy could be to use a set of distributed server hosted at different hosting providers and use shared secrets. This would require that k hosts over n are compromised for the full system to be compromised. Such system is more difficult to design so that it is as secure as the shared secret. But the benefit is that it would be distributed and thus avoid the single point of failure of a server behind a dedicated link and in a cage.