News for hackers. Stuff that matters.

A comment on Unsecure gRPC Implementations Can Compromise APIs.

Re:Unsecure gRPC Implementations Can Compromise APIs by Abtin88 on Thursday February 18, 2021 @05:12PM (#26186428)
The main problem is that bootstrapping the grpc server with correct TLS is always a barrier. so developers usually enable the InsecureOption to be able to test the grpc server, and after that they forgot to change the configurations for the production.
[ Parent | on HN ]

There are no comments on this comment yet.