Do all the things like ++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatarSign Up
That's why companies like Stripe are monstrously profitable 😸
I used to work extensively with payment gateways & banks - they have some of the worst, most outdated and clunky APIs going, and that's if you can even get them working. Some of them were also the least secure, worryingly.
It's a world where SOAP is often considered the "new hotness." In one particular case, the API protocol we were given worked on the TCP layer, specified what specific bytes had to go in what place, and had some hideous custom encryption algorithm going on that I'm pretty sure anyone in the crypto space could have ripped to shreds in seconds. Another one we used simply used IP address whitelisting as its *entire* authentication. That's it guys, supply a public username from a known good IP and you can do whatever you like 😬