Hacker News new | past | comments | ask | show | jobs | submit login

> is it for security

Yes.

EDIT: specifically, it is do intercepting a request doesn’t allow you to issue new requests.




Isn't that what https provides. Or were the APIs creates before https was popular


The use case is different.

For example, S3. S3’s authentication scheme allow you create a limited used download link and passing to a untrusted user




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: