9 ms·
Almost like PSD2's open banking part was a huge mistake. I love how my banks, payment providers and random financial apps can now ask for unscoped access, witho
by _cenw 2y ago
Almost like PSD2's open banking part was a huge mistake. I love how my banks, payment providers and random financial apps can now ask for unscoped access, without any way to figure out what I have authorized in the past, what's still pulling my data and how I can revoke any of it.
Most OAuth providers have better transparency and control.
- dbbk 2y agoPSD2 at least has built-in expiration. I have to re-authenticate every 3 months or so I think.
- Nextgrid 2y agoProblem is that the expiration and "reauth" is handled by the third-party provider (there's no longer an actual cryptographic reauth step), and it's not like anyone is auditing this or is even incentivized to. It's pure security theater.