Unsecure gRPC Implementations Can Compromise APIs (trendmicro.com)

2 points by Abtin88 5y ago ↗ HN

1 comment

[ 6.4 ms ] story [ 14.3 ms ] thread

The main problem is that bootstrapping the grpc server with correct TLS is always a barrier. so developers usually enable the InsecureOption to be able to test the grpc server, and after that they forgot to change the configurations for the production.