3 ms·
Im sorry but encryption isn't that hard. Login isn't that hard. Session management isn't that hard. Verifying you haven't broken any of these things is hard, a
by onion2k 2y ago
Im sorry but encryption isn't that hard. Login isn't that hard. Session management isn't that hard.
Verifying you haven't broken any of these things is hard, and monitoring for breaches when you have a lot of legitimate users is very hard.
- zer00eyz 2y agoVerifying that your vendor hasn't done anything dumb is hard. Supporting your customers when they have problems is hard. Debugging issues with a thrird party in the loop is hard. Just because you farmed out auth doesn't mean you get to stop monitoring for breaches, or doing all the other things you need to do to have an eye on security. Farming out auth just ads a recurring cost per user and complexity that your going to ignore till its a bigger issue than dealing with this up front would have ever been.
- malfist 2y agoI didn't think anyone said you had to farm out auth to a third party platform.
- threatofrain 2y agoNextAuth and company won't do that for you either.