For enterprise networks or networks with restricted traffic, it's common for system administrators to configure a whitelist of outgoing traffic. Historically, Singpass has advised partners against whitelisting IP addresses and instead recommends whitelisting by domain.
Here's why:
Singpass operates on AWS, which maintains a large number of IP addresses in its CDN to ensure high availability of our services. This list changes from time to time.
Therefore, if you whitelist Singpass endpoints by IP address, there's no guarantee these IP addresses won't change. When they do, your e-service will no longer be able to access Singpass.
Thus, it is always advisable to whitelist by domain.
Comments
0 comments
Please sign in to leave a comment.