Written in my capacity as a Consulting Architect for a fintech who is currently designing its API security model. Background Recently I have been partnering with a Fintech to design their API security model. Initial design draft (prepared by their engineering team) read: "TLS 1.2+ and API keys.". In a …