Unsecure gRPC Implementations Can Compromise APIs

Posted by Abtin88 on Thursday February 18, 2021 @05:08PM
from the trendmicro.com dept.

https://www.trendmicro.com/en_us/research/20/h/how-unsecure-grpc-implementations-can-compromise-apis.html

( 1 comment | 2 points | on HN )

Re:Unsecure gRPC Implementations Can Compromise APIs by Abtin88 on Thursday February 18, 2021 @05:12PM (#26186428)

The main problem is that bootstrapping the grpc server with correct TLS is always a barrier. so developers usually enable the InsecureOption to be able to test the grpc server, and after that they forgot to change the configurations for the production.

[ Parent | on HN ]