Search code examples
securityipapi-design

Is exposing IP address secure?


I'm behind a company firewall and have been asked to share my IP address in order for me to be white-listed so can access an API. This is first time I've been asked for this and find it uncommon ? as usually I connect to an API via OAuth or access token, https username password etc. Is this a safe way to access an API, will I creating any security risks though sharing my IP ?

Update : The API host is asking for my IP.


Solution

  • You give your (external) IP address to every single website you visit. It's ok to let them strengthen access control by IP restriction.

    However, if that is the only security measure (as opposed to proper authentication and access control), that's not OK, especially not in a corporate setting, where everybody behind your firewall will have the same external IP address because of NAT (and even if it's not the case, there must be proper authentication on a secure API).