Hacker News new | ask | show | jobs
by 383toast 595 days ago
What's the stance on security for handling private tokens/cookies/sessions/etc?
2 comments
mormegil 593 days ago
My first thought. Do I understand correctly that the HAR with all my session cookies, username&passwords&etc (not mentioning possibly sensitive data in the service) is sent to OpenAPI? Well… just… be aware of it if you want to try this.
link
richardzhang 595 days ago
This is certainly an important question. We use a third-party vault to store tokens/keys.
link