2

I was reading the OWASP Cheat Sheet Series, specifically their cheat sheet for REST Security and one of the points they had under the section for API Keys was:

Do not rely exclusively on API keys to protect sensitive, critical or high-value resources.

What are the alternatives to protect resources via a REST API that they are indicating towards?

1 Answer 1

2

What are the alternatives to protect resources via a REST API that they are indicating towards?

They are indicating to implement further measures in addition to API keys, not to look for alternatives.
The other measures are in the Table of the content on right of the same page.

enter image description here

1
  • 1
    D’oh! I thought they meant something other than that. Guess my interpretation of that was wrong.
    – Script47
    Dec 1, 2020 at 18:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.