Trust boundaries
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
find the lines where data crosses from less trusted to more trusted.
Planned topics
- A trust boundary is a line where the level of trust changes: browser to API, API to database, API to payment provider.
- Everything coming across a boundary from outside must be checked.
- The client is never trusted, even your own mobile app; users can change requests.
- Data leaving your system also crosses a boundary (logs, emails, third parties).
- A data flow diagram shows actors, processes, stores, and the boundary lines.
Draft outline details
Demonstration
a diagram: Browser | boundary | Shop API | boundary | Database, plus a payment provider outside.
Check your understanding
Is the mobile app your company wrote trusted?
Show answer
No. The device and requests are controlled by the user.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.