- Published on
HMAC Timestamp Tokens: Zero-Trust Communication Between Your Own Services
How we secured inter-service communication with HMAC-SHA256 signed tokens that expire in 10 seconds — no session state, no API keys to rotate, no middleware databases to query.