Re:EC2's most dangerous feature
by rcaught on Sunday October 09, 2016 @08:00PM
(#12674243)
My point is that these type of solutions create a lot more overhead, inconsistency and variation compared to a HTTP request; granted, less security.
[ Parent
| on HN ]
Re:EC2's most dangerous feature
by eeeeeeeeeeeee on Monday October 10, 2016 @12:28PM
(#12678082)
I'm sure that's why they went with HTTP -- it is universal and will work the same way everywhere.
I still think they should just disable it by default, so you have to "opt-in" to the potential security risk and plan accordingly.