security1 publisher
Draft ORKS spec hands revocation of a leaked API key to whoever finds it
Plain API keys leak more than any other credential and still have no standard kill switch, so a draft called ORKS copies OAuth's discoverable revocation endpoint and lets the person who found the key pull it.
Publishers:securityweek.com
Reality
- Evidence45
- Adoption5
- Hype gap+20
- Incentives60
- Confidence50