From Dev.to
Implementing Request Signing for API Security: HMAC + Timestamps
Implementing Request Signing for API Security: HMAC + Timestamps API keys in headers are not enough. If a request is intercepted, that key can be replayed indefinitely. Request signing forces every...