~/writing

API Security

1 post tagged api-security. clear filter

September 2026
  • 18
    Why a webhook is a public endpoint anyone can POST to
    day 16 · One Concept a Day — The AI-Era Engineer's Glossary

    It looks like a mailbox for a partner you trust, but the URL is public — and now agents are wiring these up faster than anyone bothers to check for a signature.