Hacker News new | past | comments | ask | show | jobs | submit login

You're absolutely right, this is also why you generally encrypt sessionized or "consistent view" pagination tokens for public apis (save for primitives like ddb or Kafka)

The end user should know no details about your internal key space.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: