undefined | Better HN

0 pointshomakov9y ago0 comments

But apigee becomes a man in the middle, which is very bad for your security.

0 comments

2 comments · 1 top-level

fixermark9y ago· 1 in thread

I imagine it's a tradeoff. It's worse for your security if you try to roll your own auth/auth solution and botch it.

Auth is a routine job, only a really silly developer manages to make simple token auth vulnerable. There's no a "tradeoff" in leaving auth to MitM because it's "hard", oh also there's bunch of libraries out there doing it for you on your servers.

j / k navigate · click thread line to collapse