[bisq-network/proposals] API security (#69)

[mrosseel]

looks good bernard, some general thoughts:
- did you look into JWT (https://jwt.io/ and https://en.wikipedia.org/wiki/JSON_Web_Token ) ? Not strictly needed of course, but used it lately and works well.
- With letsencrypt SSL has gotten much easier (add some docker containers and you have auto-updating free SSL) so would at least leave the option open for those who have a domain name. Basically an option to either disable TOR or have it running on a non-80 port.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/proposals/issues/69#issuecomment-456058772
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20190121/16007732/attachment.html>