Skip to main content

All Questions

Filter by
Sorted by
Tagged with
5 votes
2 answers
556 views

What is the use case of request signing in this mobile app?

The API of a mobile app I was testing is sending the AWS AccessKeyId and SecretKey used for request signing from the AWS Cognito server unencrypted (apart from the regular TLS encryption). Making it ...
Martin Fürholz's user avatar