LESSON 1.3
Secure defaults and least privilege
Learn key techniques and workflows in Practical Web Security.
4m
intermediate
11,899 students
Overview
Most breaches exploit something that was left open rather than something clever. Default deny, then grant the narrow thing that is needed.
In this lesson you will:
- Default to deny and grant explicitly
- Scope credentials to the minimum they need
- Reduce attack surface by removing unused paths
Pro Tip
Use caching and revalidation wisely to ensure your app stays fast and data remains fresh without unnecessary requests.