11 articles tagged REST.
Quick Summary: AES-256 is the workhorse of enterprise data encryption at rest. It is not considered impacted by quantum computers or Post-Quantum Cryptography. It is considered quantum-resistant, which means it can withstand attacks from quantum computers / algorithms better than other encryption…
Read article: AES-256 and the Post-Quantum Panic: The Rare Cryptographic Algorithm That Isn’t SweatingSometime around 2012, I published a similar list (up to the point of APIs). I recently put the same list in another post. I thought having this as its own post would be useful, or, at least, amusing.
Read article: Begotten & Forgotten Distributed Service TechnologiesFirst, let’s get the usual introductions out of the way. For an in-depth discussion of what Authorization is, check out this post. For a complete introduction to Authorization concepts see my Authorization Series. This post continues my long-running Authorization Series. In this post, we’re going…
Read article: Application Front-Ends Must Not Make Authorization DecisionsThe use of HTTP POST vs HTTP GET for read-only (or query) operations in REST APIs recently came up in a conversation. For this particular shop, there had been a long-standing ban on the use of GET requests for use in homegrown applications. This had been the case since before REST APIs were in…
Read article: HTTP POST vs GET: Is One More Secure For Use In REST APIs?The following blog posts discuss SAML2 use cases that have been explored in this series:
Read article: SAML2 Use CasesThis post wraps our look at SAML v2.0 Use Cases. The first four use cases are described in “SAML v2.0 vs JWT: SAML2 Web Application SSO Use Cases” and “SAML v2.0 vs. JWT: SAML2 with SOAP Web Services and REST APIs”. The full list of SAML2 vs JWT-related blog posts can be found here.
Read article: SAML v2.0 vs. JWT: SAML2 Single LogoutThis post continues our look at SAML v2.0 Use Cases. The first two use cases are described in “SAML v2.0 vs JWT: SAML2 Web Application SSO Use Cases”. The full list of SAML2 vs JWT-related blog posts can be found here.
Read article: SAML v2.0 vs. JWT: SAML2 with SOAP Web Services and REST APIsThis post was originally published as “What are APIs? (The Technology Perspective)” on the Levvel Blog.
Read article: What are APIs? (The Technology Perspective)I have watched this debate unfold at every client site I have visited in the past few years. There are several angles to this question. From a technical stand point, a service is a program that takes some type of input, performs a task, and return some type of output. This is vague. It can describe…
Read article: What is a Web Service? What is a Service?A Service Consumer is any tier of an organization’s systems that calls web services. These services could be implemented by SOAP, REST, XML over HTTP, EJBs, JMS or MQ applications, RMI, RPC, invocation of COBOL programs on a mainframe with 3270 screen-scraping, communication over a custom TCP…
Read article: What is a Service Consumer?
