5 posts tagged with "Security"

Something in AI shifted over the past year, quietly enough that the moment was easy to miss. The tools stopped just answering questions and started taking actions. In financial services that shift is further along than most people realize, and a new survey of security teams across the industry put numbers to what I had felt from the inside. Firms are deploying AI that acts faster than they are learning to govern it. That gap is the whole problem, and the agents are the least of it.

The more I learn about fraud, the more I realize how much of banking is shaped by the people trying to exploit it. Fraud isn't a side problem. It influences how accounts are opened, how transactions are monitored, how clients are verified, and how much friction everyone tolerates along the way.

I've been turning over how many banking processes start the same way. Someone needs to prove they are who they say they are. Account opening, wire transfers, loan applications, address changes. Every single one begins with identity.

In the previous posts, I covered what REST is and how resources and methods work. Now let's look at what makes an API robust: status codes that communicate clearly, security that protects your data, and design patterns that keep things maintainable. These are the things I wish I'd understood better when I started building APIs.

How can two people who've never met exchange secret information over an open network? It's a question that sounds impossible until you see the answer: public-key cryptography.