Post

Adam Langley
Adam Langley@BuildHackSecure·
Why are API keys not bound to an IP address allow list? I never see this option available in API services. Failing that, you should also receive an email whenever a new IP address attempts to use your API key. API keys should double up as canary tokens.
English
31
19
216
25.5K
Franci Penov
Franci Penov@francip·
@BuildHackSecure Because I and many others don't have a static IP address at home. Which coincidentally is why I cannot manage my domains with Namecheap from home.
English
5
1
11
1.2K
Adam Langley
Adam Langley@BuildHackSecure·
@francip Also how often does it really change? I’ve always had dynamic at home and it barely ever changes.
English
5
0
7
1.1K
Paylaş