Re:API responses should be signed
by mcv on Monday January 20, 2020 @08:20AM
(#22098577)
> "How do I know your comment is legit if you didn't sign it?"
The comment is fake. The points in it are valid, though.
The big difference here is whether a comment or API response is claiming any kind of authority over certain data, or is a self-contained argument where the validity doesn't depend on where it comes from.
The comment is fake. The points in it are valid, though.
The big difference here is whether a comment or API response is claiming any kind of authority over certain data, or is a self-contained argument where the validity doesn't depend on where it comes from.