georgekb

4 ms·

1. 1.▲
   by georgekb 5y ago

   I know it might sound crazy, but since you're that big, I suggest you investigate the idea of writing your own Envoy control plane and thus creating your own Envoy-based API gateway. It's not really as hard/time consuming as
2. 2.▲
   by georgekb 5y ago

   Wow, never heard of HTTP Message Signatures until now. However, like I said, Clock skew is a huge problem in this method. I found out about it much later after implementation when I used the client on some old Windows machine whose clock wa
3. 3.▲
   by georgekb 5y ago

   Thanks for this great post. I actually just signed up to say that I actually wasted a considerable amount of time trying to create my own SIGv4 just to avoid replay attacks especially if the server is behind some L-7 load balancer such as C