System Design · Senior · Question 44 of 75

Why are signed links to private files made short-lived?

Explanation

A signed URL grants access without authorization to anyone who has it. An expiry of minutes limits the damage from forwarding or leaks via logs and Referer. For long-term access, new links are issued after a permission check.

Further reading

Problem with a question

System Design · Senior · question 44

Test yourself

Take the System Design · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.

Take this quiz