Postman users are probably leaking their secrets to Postman's hosted servers

15 points by jonthepirate 4 years ago | 4 comments

I suspect most people who use recent versions of Postman might not realize there's a new "sync" feature that seems to upload all of your HTTP request configurations to Postman's hosted servers. That leads me to believe that if Postman gets hacked, that will probably cause a wave of data breaches which seem imminent.

weastur 4 years ago |

Just use "offline" tools like httpie. Pretty good interface. My experience suggests that a relatively small number of engineers need to work with more than 5-10 requests at a time. So you can just store commands in some text file or just using shell history search.

fhaldridge7 4 years ago |

I've stopped using postman because they were pushing too hard for their paid plan. Now I'm using https://insomnia.rest/

dyme13 4 years ago |

Hasn't sync been around since 2015? https://blog.postman.com/postman-2-0-with-sync-is-here/

This is not a new problem with recent versions - it's always been a problem as far as I can tell.

Graffur 4 years ago |

The whole cloud product part of Postman is so useless. Does anyone recommend another similar service?