Timeline for Should we encrypt all REST API calls from a mobile device?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 24, 2020 at 7:05 | vote | accept | Rickky13 | ||
| May 23, 2020 at 12:14 | comment | added | Pedro | Don't think it's uncommon or over the top. Given the right use case it is neither. Also I'm glad it led you to consider key distribution carefully. An issue I find frequently is people encrypting API data with a static key also shared by the API. | |
| May 23, 2020 at 6:40 | comment | added | Rickky13 | Thanks for you insights, given the scenario it would be really tough to manage the keys for N number of client App to Server, and would be a potential massive overhead, however if it is done adequately it is an uncommon practice but still a reasonable to perform this type of 2nd level encryption. | |
| May 22, 2020 at 8:48 | history | edited | Pedro | CC BY-SA 4.0 |
added 17 characters in body
|
| May 22, 2020 at 8:33 | history | answered | Pedro | CC BY-SA 4.0 |