News for hackers. Stuff that matters.
Re:API responses should be signed by DarkWiiPlayer on Monday January 20, 2020 @08:17AM (#22098559)
It might make sense to also add a section to the article considering why you'd want to verify an API signature instead of calling the API again.

Some examples I could think of:

- You don't have access to (that part of) the API, but to its public key

- The data in question has been deleted

- The entire API or even Service is gone

- The API call involves some complex calculations that takes a long time

- The data might have to be verified without access to the API or the network as a whole

- You are being Surveilled and/or your access to the API or some of its endpoints is being restricted

There are no comments on this comment yet.