Coinbase making their API more secure

[estrabd]

This is just for anyone who has looked or used Coinbase’s API.

The minute I looked at the authentication (just a single freaking key!), I cringed and though I played with it I refused to use it for real.

Thankfully, they’ve updated it with what I would expected them to have anyway - permissions, HMAC signatures, and IP white lists. Thank baby Jesus.

http://blog.coinbase.com/post/75936737678/more-security-and-granular-control-with-the-new-api