Security
Edge protections for storefront traffic without breaking legitimate shoppers.
TLS
- TLS 1.2+ (1.3 preferred)
- Automatic cert issuance & renewal
- Optional HSTS once fully HTTPS
Bot & rate limits
Default property policy: soft challenge suspicious clients; hard rate limit on /cart/add and login endpoints. Tune in Dashboard → Security.
Signed private assets
# Time-limited URL for wholesale lookbooks
https://assets.northwind.shop/private/ss26.pdf?exp=1735689600&sig=BASE64URL
Signatures use an HMAC key managed per property. Clock skew tolerance: 60 seconds.