4 ms·
Without oauth the user would type in their more limited per-site credentials, not their google creds or whatever. Splitting hairs if people reuse passwords, bu
by rendaw 2y ago
Without oauth the user would type in their more limited per-site credentials, not their google creds or whatever.
Splitting hairs if people reuse passwords, but I feel like "don't reuse passwords" is easier to digest for the layman than "check the ssl cert".
- dartos 2y agoany phishing email could just directly link to a fake Google login form. Oauth just adds extra steps for the attacker.