Unsecure gRPC Implementations Can Compromise APIs (trendmicro.com)

2 points by Abtin88 5y ago ↗ HN

1 comment

[ 0.16 ms ] story [ 13.2 ms ] thread

The main problem is that bootstrapping the grpc server with correct TLS is always a barrier. so developers usually enable the InsecureOption to be able to test the grpc server, and after that they forgot to change the configurations for the production.