Securing Your HTTP API with Hawk

Description

Spending too much time working on a custom authentication scheme for your API? Concerned about how secure your one-off implementation actually is? Learn more about the Hawk HTTP authentication scheme. It provides partial cryptographic verification for both requests and responses and it is supported by multiple languages. With Hawk securing your HTTP API you can rest easy knowing that your server and clients can trust the data they share so that you can focus on building your application's killer features.

Conférence donnée lors du PHP Tour Luxembourg 2015, ayant eu lieu les 12 et 13 mai 2015.

Informations complémentaires

Slides
Fiche joind.in
Audio : anglais

Vidéo

Le speaker

Beau SIMENSEN

Voir tous ses talks

Beau Simensen (@beausimensen, beau.io) has been a professional polyglot programmer since 1998. He owns Dragonfly Development (dflydev.com), a consulting company, and is co-host of That Podcast (@thatpodcast, thatpodcast.io). An active open-sourcer, he created Sculpin (sculpin.io) and helped create Stack PHP (stackphp.com). He is also the Sculpin representative to the PHP Framework Interoperability Group (PHP-FIG). Beau is a proponent of framework agnostic code. Unglue all the things!

Commentaires

This was way too smart for me, I didn't understand the what, the how, and the why of this conf. I wish there were some sequence diagrams to illustrate the exchanges. Also, not trying to be picky, but typos on slides are distracting.

Francois Zaninotto, le 12/05/2015

For me this talk took too much for granted. I would have benefited from some background information, like not only saying we're using X in this situation, but also some background how X works (yes, diagrams would have helped) and probably why Y and Z wouldn't work in this situation.

Philipp Krenn, le 13/05/2015

txs for this talk. It would be nice to have less theory and maybe a more practical example.

Olivier Mansour, le 13/05/2015