3

I was reading the OWASP Cheat Sheet Series, specifically their cheat sheet for REST Security and one of the points they had under the section for API Keys was:

Do not rely exclusively on API keys to protect sensitive, critical or high-value resources.

What are the alternatives to protect resources via a REST API that they are indicating towards?

Improve this question

1 Answer 1

Reset to default
3

What are the alternatives to protect resources via a REST API that they are indicating towards?

They are indicating to implement further measures in addition to API keys, not to look for alternatives.
The other measures are in the Table of the content on right of the same page.

enter image description here

Improve this answer
1
  • 1
    D’oh! I thought they meant something other than that. Guess my interpretation of that was wrong.
    – Script47
    Dec 1, 2020 at 18:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .