The Secret Life of Secrets - Designing Secure API Keys

Dive into the world of API key design and security in this 34-minute conference talk from Security BSides San Francisco 2024. Explore various types of API keys, including those with fixed prefixes, cryptographic implementations, auto-expiring keys, and bring-your-own-key models. Learn about the security implications and best practices for each approach, backed by fact-driven analysis rather than vague comparisons. Gain valuable insights for designing robust and secure API authentication systems, essential knowledge for developers and security professionals alike.