Building Microservices with Go

TLS

The other exploit that our attacker took advantage of was that all of the traffic behind the firewall was not encrypted and, by sniffing the traffic between services, they discovered a method to fake a call to the payments gateway to send a refund to a remote bank account. The other issue might be that you are passing sensitive information such as bank details or credit card numbers between your frontend service and your payment service. Even if you are not storing the credit card numbers on your system, if you are not careful, you could expose this traffic to an attacker by assuming that everything behind your firewall is safe. TLS, or Transport Layer Security, no longer adds any overhead due to the advances in processing power available ...