<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>API Security on Engineering Playbook</title><link>https://learn.tanhdev.com/tags/api-security/</link><description>Recent content in API Security on Engineering Playbook</description><image><title>Engineering Playbook</title><url>https://learn.tanhdev.com/vesviet.png</url><link>https://learn.tanhdev.com/vesviet.png</link></image><generator>Hugo</generator><language>vi</language><lastBuildDate>Sun, 16 Aug 2026 12:00:00 +0700</lastBuildDate><atom:link href="https://learn.tanhdev.com/tags/api-security/index.xml" rel="self" type="application/rss+xml"/><item><title>Phần 6: FAPI 2.0: DPoP, mTLS &amp; Sender-Constrained Tokens</title><link>https://learn.tanhdev.com/series/core-banking-architecture/part-6-fapi-2-api-security/</link><pubDate>Thu, 18 Jun 2026 11:50:00 +0700</pubDate><guid>https://learn.tanhdev.com/series/core-banking-architecture/part-6-fapi-2-api-security/</guid><description>FAPI 2.0 DPoP: Node.js ES256 JWT generation, Go verification, mTLS Kubernetes 1-3ms vs &amp;lt;0.1ms pooled, PAR flow, token replay protection.</description></item><item><title>Bảo Mật &amp; Giới Hạn Tốc Độ API (Rate Limiting) — Token Bucket, Leaky Bucket &amp; Redis Lua</title><link>https://learn.tanhdev.com/series/system-design/11-security-api-rate-limiting/</link><pubDate>Thu, 18 Jun 2026 14:00:00 +0700</pubDate><guid>https://learn.tanhdev.com/series/system-design/11-security-api-rate-limiting/</guid><description>Thiết kế API Rate Limiting trong Go: So sánh Token Bucket và Leaky Bucket, kỹ thuật Sharded Limiter tối ưu Lock Contention và Redis Lua Sliding Window.</description></item></channel></rss>