News for hackers. Stuff that matters.
Re:Ways to reduce the costs of an HTTP(S) API on AWS by bureaucrat on Friday December 13, 2019 @10:57AM (#21782650)
Or just encrypt in-house and use HTTP.
Re:Ways to reduce the costs of an HTTP(S) API on AWS by maxkuzmins on Friday December 13, 2019 @11:01AM (#21782706)
These guys receive requests from mobile devices. Afaik sending unencrypted HTTP requests is not allowed on some platforms (e.g. iOS).
Re:Ways to reduce the costs of an HTTP(S) API on AWS by throw03172019 on Friday December 13, 2019 @11:43AM (#21783105)
You can disable transport security for a certain domain using the plist key NSAppTransportSecurity. But you rarely should do this :)

https://developer.apple.com/library/ios/documentation/Genera...

Re:Ways to reduce the costs of an HTTP(S) API on AWS by bureaucrat on Friday December 13, 2019 @11:12AM (#21782820)
First, they can offer both http and https endpoints. Second, you can send HTTP request if you set NSAllowsArbitraryLoads=true.
Re:Ways to reduce the costs of an HTTP(S) API on AWS by jrockway on Friday December 13, 2019 @11:47AM (#21783140)
I think you should think long and hard before you roll your own crypto.
Re:Ways to reduce the costs of an HTTP(S) API on AWS by gberger on Friday December 13, 2019 @11:50AM (#21783168)
You don't need to roll your own crypto in order to encrypt in-house.