An integration team proposes “encrypting” API JSON by Base64-encoding bodies on HTTP without TLS. Which principle of API encryption does that miss beyond hiding bytes poorly?
Select an answer to reveal the explanation.
Short Explanation
Hiding the recipe in pig Latin does not stop someone from rewriting it mid-trip. TLS both conceals and protects integrity; Base64-on-HTTP does neither for real.
Full Explanation
Encryption principles on APIs include confidentiality and integrity of the message. TLS record protection detects tampering with bodies or headers while encrypting content. A custom Base64-over-HTTP scheme provides neither strong confidentiality nor integrity and is not an acceptable substitute.