3 ms·
Yes. Some apps without sensitive info can do it, but that's it.
by homakov 10y ago
Yes. Some apps without sensitive info can do it, but that's it.
- pluma 10y agoSo in other words StackOverflow etc (i.e. all non-trivial apps that support third-party login via OAuth) are all broken from a security POV?
- homakov 10y agoIn one way or another. Most are vulnerable to bugs in standard (see sakurity.com/oauth) but every single one depends on central authority which is just stupid for auth.