I addressed why what gets in logs doesn't matter: if their server is compromised... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

SomeOtherGuy2 on Feb 1, 2012 | parent | context | favorite | on: How Not to write a "REST" API

I addressed why what gets in logs doesn't matter: if their server is compromised you have to assume you are boned anyways. And I don't understand why is your comment would be talking about "HTTP-GET"? The API in question is dealing with HTTPS for both GET and POST requests.

cristoperb on Feb 1, 2012 [–]

I don't understand why your comments pointing out details of the http spec and common-sense security considerations are being downvoted. I guess they are coming across as overly 'stident'? Anyway, I've found them helpful. Thanks.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact