[rwth-security] Authentication and the Have I Been Pwned API

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"Authentication and the Have I Been Pwned API"

--> "... highlighted 3 really important attributes at the time of launch:

There is no authentication. There is no rate limiting. There is no cost.

One of those changed nearly 3 years ago now - I had to add a rate limit. The other 2 are changing today and I want to clearly explain why. ..."

VG

Bernd

[0] https://www.troyhunt.com/authentication-and-the-have-i-been-pwned-api/