Server public key pinning by URL

A method of identifying a first processing device, comprising:

• securely receiving by a hardware processor a network resource address which includes an encoded identifier following a host name in the network resource address, the encoded identifier derived from a trusted public key of the first processing device;
• communicating by the hardware processor with the first processing device at the network resource address;
• receiving by the hardware processor, in response to the communicating, a communicated public key purporting to identify the first processing device;
• and
• comparing by the hardware processor the encoded identifier to a transformation of at least a portion of the communicated public key to determine a match between the encoded identifier and the transformation, and if the encoded identifier and the transformation of at least a portion of the communicated public key match, further communicating with the first processing device, and if the encoded identifier and the transformation of at least a portion of the communicated public key do not match, ending communicating with the first processing device;
• wherein the first processing device includes an application programming interface (API) management portal and
• the securely receiving includes receiving from the first processing device a communication comprising a registration token, the network resource address and the identifier of the first processing device, the registration token identifying an API gateway;
• wherein the communicating further comprises extracting the identifier and connecting to the first processing device using the network resource address to provide the registration token;
• and
• wherein the further communicating includes receiving a registration verification with the API management portal from the first processing device.