Questions tagged [request-signing]
2 questions
5
votes
2 answers
What is the use case of request signing in this mobile app?
The API of a mobile app I was testing is sending the AWS AccessKeyId and SecretKey used for request signing from the AWS Cognito server unencrypted (apart from the regular TLS encryption). Making it possible to re-sign all requests to their AWS…
Martin Fürholz
- 795
- 9
- 21
4
votes
1 answer
Does signing of HTTP requests have any benefit when using TLS?
Signing HTTP requests is all the rage nowadays. The benefits of doing so when communicating over an insecure channel are clear. With signatures you can bring message integrity and authentication to such an environment.
But I'm struggling what…
harm
- 593
- 1
- 5
- 7