💻 IT & Coding concepts,
clear in 60 seconds.

Secure API design requires multiple strategies to protect sensitive data and access.

Authentication verifies who you are, while authorization determines what you can do.

Zero Trust Architecture ensures that no user or device is trusted by default.

Fail Fast means stopping quickly on errors, while Fail Safe ensures safety in failures.

Hashing is one-way for verification, while encryption is two-way for confidentiality.

SSRF is a vulnerability where an attacker tricks a server into making unintended requests.

HTTPS is a secure version of HTTP that encrypts data for safety.

API keys help identify clients and control their access to APIs securely.

The TLS handshake establishes a secure connection for HTTPS, ensuring data safety.

Encryption at rest and in transit are essential for protecting data both stored and in motion.

KMS securely manages encryption keys to protect data from theft.

Symmetric encryption uses one key, while asymmetric uses a pair of keys for security.

CSRF tricks your browser into making requests without your consent.

XSS is a vulnerability that lets attackers run scripts in users' browsers.

Password hashing with unique salts ensures security by creating different hashes for identical passwords.

Functional requirements define what a system does, while non-functional requirements define how it performs.

mTLS allows microservices to verify each other's identities using certificates.

Token expiration and refresh token rotation secure user sessions by limiting token lifespan and preventing unauthorized access.

Session-based authentication uses cookies to remember users after login.

The CAP Theorem explains the trade-offs in distributed systems during network failures.

The Bulkhead Pattern isolates resources to protect critical workloads from failures.

JWTs allow secure user authentication without needing session storage.

Availability is about access; reliability is about correct performance.

OAuth 2.0 lets apps access user data securely without passwords.

REST API design focuses on creating clean, efficient, and scalable web services.

OpenID Connect allows apps to authenticate users and verify their identities securely.