Questions tagged [request-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Applying application-level signing in HTTP

I have to secure HTTP requests`s body on application layer, so I wanted to generate signatures with hash of body and the receiver will validate it. But I can do it in different way and apply it into ...
Szyszka947's user avatar
0 votes
2 answers

Web request TLS

What version of TLS would be required for a router that separates client requests from a web server behind a router? Let's say the supported TLS client is 1.2 and so is the web server, BUT the router ...
cadobe's user avatar
  • 3
1 vote
0 answers

Sign vs hash HTTP body request

I use OAuth2 private_key_jwt authentication scheme to authenticate clients. Also, I need to be sure that request body isn't modified. I see two ways: In token which I use to authenticate client I can ...
Szyszka947's user avatar
5 votes
1 answer

Does signing of HTTP requests have any benefit when using TLS?

Signing HTTP requests is all the rage nowadays. The benefits of doing so when communicating over an insecure channel are clear. With signatures you can bring message integrity and authentication to ...
harm's user avatar
  • 603
5 votes
2 answers

What is the use case of request signing in this mobile app?

The API of a mobile app I was testing is sending the AWS AccessKeyId and SecretKey used for request signing from the AWS Cognito server unencrypted (apart from the regular TLS encryption). Making it ...
Martin Fürholz's user avatar