Uploaded October 2023 | Updated September 2026, 2 weeks ago
In this episode of Authorization in Software, Damian Schenkelman sits down with John Huffaker, distinguished engineer at Box. The discussion dives into how Box, a major file-sharing and collaboration platform, approaches authorization.
The conversation touches on:
⦿ The importance of security for a platform like Box which handles sensitive data for countless users and businesses.
⦿ A look into the different layers of security, including application security and infrastructure security.
⦿ The challenges and solutions around ensuring that Box's platform remains impenetrable, including working with HackerOne for early pentest results.
⦿ A detailed overview of the multiple layers and kinds of authorization decisions, from viewing files and folders to understanding user permissions and API accesses.
⦿ And more...
Tune in to get an inside look at the ways Box ensures their users' data remains safe and the authorization mechanisms they employ to achieve this.
Sign up for our developer newsletter! a0.to/zeroindex
_______________________________________
Learn with Auth0 by Okta Try for free - a0.to/auth0
The Auth0 by Okta blog - a0.to/blog
In this episode of Authorization in Software, Damian Schenkelman sits down with John Huffaker, distinguished engineer at Box. The discussion dives into how Box, a major file-sharing and collaboration platform, approaches authorization.
The conversation touches on:
⦿ The importance of security for a platform like Box which handles sensitive data for countless users and businesses.
⦿ A look into the different layers of security, including application security and infrastructure security.
⦿ The challenges and solutions around ensuring that Box's platform remains impenetrable, including working with HackerOne for early pentest results.
⦿ A detailed overview of the multiple layers and kinds of authorization decisions, from viewing files and folders to understanding user permissions and API accesses.
⦿ And more...
Tune in to get an inside look at the ways Box ensures their users' data remains safe and the authorization mechanisms they employ to achieve this.
Sign up for our developer newsletter! a0.to/zeroindex
_______________________________________
Learn with Auth0 by Okta Try for free - a0.to/auth0
The Auth0 by Okta blog - a0.to/blog
