Download pdf
APIs must be de designed with systems and unpredictable interactions in mind, including failure modes. What happens when other dependent services or layers of the stack fail? What information is being fed back inadvertently? Expecting the unpredictable to happen, adapting dynamically, and being precise in intentions throughout can go a long way towards secure-by-design.