News for hackers. Stuff that matters.

A comment on API responses should be signed. Parent comment

Re:API responses should be signed by tsimionescu on Monday January 20, 2020 @03:14AM (#22097266)
SSL data is encrypted with a symmetric, per-session key. Only the initial handshake is done through asymmetric encryption, and only the initial handshake uses the global public/private key pair.
[ Parent | on HN ]

There are no comments on this comment yet.