MAKING CLOUDFLARE WORKERS WORK FOR RED TEAMS

Summary from the TLDR InfoSec newsletter

Cloudflare Workers can provide a serverless, rapidly adaptable platform for Conditional Access Payload Delivery (CAPD). Authentication can be achieved via a custom header, and the system can be enhanced by supplying secrets as environment variables, using more generic error codes, or by using timing-safe comparisons. The post also details detection opportunities for defenders.