News for hackers. Stuff that matters.

A comment on Securing your API: a modern alternative to CSRF tokens. Parent comment

Re:Securing your API: a modern alternative to CSRF tokens by stouset on Tuesday June 13, 2017 @09:05PM (#14550038)
CSRF tokens do not help you in any way against DDOS. CSRF tokens are handed out willingly on essentially any GET request.
[ Parent | on HN ]
Re:Securing your API: a modern alternative to CSRF tokens by jordanlev on Wednesday June 14, 2017 @12:28AM (#14550645)
Exactly -- I think that's one of the points of the article.
[ Parent | on HN ]