3 ms·
If the "third party" is actually a malicious native application, they can just simulate the launch of Safari, and most users probably won't even notice. In thi
by nupark2 15y ago
If the "third party" is actually a malicious native application, they can just simulate the launch of Safari, and most users probably won't even notice.
In this threat model, OAuth is practically a security no-op and a huge usability negative.
- chrismoos 15y agoYeah they could simulate the launch, good point. I guess you'd have to hit the home button to know you are leaving the app. Sucks :(