6 ms·

Do you realize you still have to trust the developer implemented their side of oauth correctly? It's not like Google is sending engineers to every implementor t

by megous 6y ago

Do you realize you still have to trust the developer implemented their side of oauth correctly? It's not like Google is sending engineers to every implementor to verify that.

sp332 6y ago
Well I don't give the app developer my password, and Google limits the information that they can get about my account on their end. What could a malicious or incompetent app developer do to my Google info?
- fastball 6y ago
  What use does an app developer have for your password to their own service?
- megous 6y ago
  You can lose your data you put to the service, obviously, if someone can get over the broken oauth implementation.