3 ms·
Yes indeed, running OAuth2 without https is madness!
by machete143 9y ago
Yes indeed, running OAuth2 without https is madness!
- unilynx 9y agoIt's not just madness, TLS is a MUST in several places in the oauth2 spec. In fact, they managed to remove a lot of oauth1 madness (all the complex signing stuff) by simply requiring TLS and let that layer deal with it.