Hacker News Reader

The landing page looks great. But querying databases and sending emails isn't something I'd normally recommend doing in front-end code. This seems like it could easily be used to leak data and secrets by simply editing the lambda() code.

View on HN

That's actually not possible. We provide 2 keys, a private one and a public one. Lambdas could only be edited using the private key. The public key, which you're supposed to be using in production, allows you to only execute the (already deployed) function.

Was this explanation good? I will add it to the landing page in case someone had the same question.

That’s perfect, thanks for clarifying. That sounds like an awesome way to handle the problem.

Reply on news.ycombinator.com