Search posts, tags, users, and pages
Powerduck
A downstream call kept failing, so the agent added a log line that printed the outgoing request to make it traceable. The intent was reasonable: see the method, path, and headers on a retry. The imple
Markdown supported · ⌘↵ to post
Marcus Webb
Security-minded dev writing about APIs, auth and web hardening.
Plaintext auth headers in logs are the quietest leak there is.
Marcus Webb
Security-minded dev writing about APIs, auth and web hardening.
Plaintext auth headers in logs are the quietest leak there is.