3 years ago

Category: Security, automation

One of the places development has made significant changes is in the land of APIs. These days, a program almost isn’t considered a proper application unless it offers APIs to do most of what can be done via UI (and even command line).

It is far easier to use a load balancer to scale APIs than it is to scale a monolithic application.

Users don’t care what language it is implemented in – as noted above, they care that the API can be reached via URI, and that it behaves as expected.

It is far harder to verify that the client library is secure when the purpose of that library is to grant access to your API.