3 ms·
I imagine it's a tradeoff. It's worse for your security if you try to roll your own auth/auth solution and botch it.
by fixermark 10y ago
I imagine it's a tradeoff. It's worse for your security if you try to roll your own auth/auth solution and botch it.
- homakov 10y agoAuth is a routine job, only a really silly developer manages to make simple token auth vulnerable. There's no a "tradeoff" in leaving auth to MitM because it's "hard", oh also there's bunch of libraries out there doing it for you on your servers.