4 ms·
Money doesn't guarantee anything, as seen by the recent issue with Okta. If you're using a centralized auth service and expecting no vulns or exploits, you're g
by hypeatei 2y ago
Money doesn't guarantee anything, as seen by the recent issue with Okta. If you're using a centralized auth service and expecting no vulns or exploits, you're going to be severely disappointed. These are the juiciest targets and very complex pieces of software.
I don't see an issue with calling out this Keycloak response time either. It's not inherently negative, just stating facts.
- debarshri 2y agoIf you central auth - you have vulnerabilities If you decentralize auth - you have vulnerabilities. It can lead to shadow credentials as well as credential and auth sprawl. It is about de-risking your approach. Either approaches work until they don't.