News for hackers. Stuff that matters.

A comment on Ask HN: What's the recommended method of adding authentication to a REST API?. Parent comment

Re:Ask HN: What's the recommended method of adding authentic... by stu_b on Thursday January 18, 2018 @08:08AM (#16176785)
RE: Denying plaintext connections. Totally agree & great if your clients connect directly to hosting you have full control over. The biggest problem I've come across is that cloud services like CloudFlare & API gateways (Tyk for example) don't have the option (or at least I couldn't find it) to disable HTTP traffic. Plenty offer to redirect HTTP to HTTPS but I haven't been able to refuse HTTP traffic outright.

Does anyone have any recommendations for services that do offer this? (or where those options are in the named services)

[ Parent | on HN ]
Re:Ask HN: What's the recommended method of adding authentic... by hirstys on Thursday January 18, 2018 @09:06AM (#16177069)
If you can install an open source Tyk gateway in your stack, you can use TLS on the Tyk Gateway to refuse HTTP outright. However, this isn't a Tyk cloud feature at present.
[ Parent | on HN ]
Re:Ask HN: What's the recommended method of adding authentic... by jively on Thursday January 18, 2018 @03:35PM (#16181129)
Correction: if Tyk Cloud has a custom domain (CNAME) setup for you then it can ignore https - it’s not a self-service option though.
[ Parent | on HN ]