3 ms·
We are using Google's oauth2 protocol. No user password is stored or even ever transmitted to our server.
by tonyx 14y ago
We are using Google's oauth2 protocol. No user password is stored or even ever transmitted to our server.
- drivebyacct2 14y agoWell I'm not at a Mac so I can't confirm but it's unfortunate to see such misinformation in this thread. I apologize for repeating it, I was too trusting of other comments.
- nestlequ1k 14y agoSince you are framing in the login with webkit, why not show the URL as well? User's need to see htts://google.com or they'll assume it's a phishing attack.
- ryanwaggoner 14y agoHow is this actually any more secure? It's pretty easy to display a legit (but "fake") URL while your phishing form is displayed in the webview.