4 ms·
Eh, I don’t think that’s true. I think you’ve just had bad experiences, and that that can definitely be true in pockets. For example, I am exceptionally happy
by borski 2y ago
Eh, I don’t think that’s true. I think you’ve just had bad experiences, and that that can definitely be true in pockets.
For example, I am exceptionally happy that we have standardized on OpenAPI documentation and/or the self-documenting nature of GraphQL (where used) rather than WSDLs and the other ancient nonsense.
I’m also glad we’ve mostly progressed from SAML to OAuth2/OIDC/JWT. Sure, SAML still exists but it’s definitely on its way out, once the enterprises of yesteryear eventually switch.
I don’t know if you’ve ever built a SAML application and/or IdP, but it’s awful.
Sometimes “old” is just worse.
- hi-v-rocknroll 2y agoYou're cherry-picking technologies. I'm talking about people. Yes, I have. Krb5, LDAP, OAuth2, CAS, and SAML 1 & 2. XML sucks but sometimes you have to pee with bits you have rather than remake the entire world all at once with a utopian panacea.
- borski 2y agoOh, of course - if you have no other options you go with what you have. But if you have other options, I think too many people are also stuck in “I know what I know and I know it will work” and will happily kludge along while something else is sitting right next to them, better for the job. Neither extreme works.