3 ms·
Well, with oauth, you are not telling dwolla your password. You are telling the 3rd party, that dwolla (or whoever) can have an access token to your account, ve
by hayksaakian 11y ago
Well, with oauth, you are not telling dwolla your password. You are telling the 3rd party, that dwolla (or whoever) can have an access token to your account, verified via popup to facebook, or a redirect to facebook.
Imagine if "login with facebook" meant "tell my startup your facebook password".
How is this considered OK?
- simoncion 11y ago> How is this considered OK? If I might snark for a second: Because banks say: "We're the bank. We're run by Masters of the Universe, we are the smartest people in the room, and you can trust us and our data-handling practices!" To be serious: Having to disclose the same credentials that give you access to the web UI for your bank accounts to a random third-party in order to use their service is insane.