3 ms·
It sounds great both for users and for devs which, I'm sure, is going to help it take off. However I've got one question: was this conceived from the start wit
by martinced 14y ago
It sounds great both for users and for devs which, I'm sure, is going to help it take off.
However I've got one question: was this conceived from the start with security in mind and is it simple enough as to not be plagued with the countless security issues which product that are too complex inevitably run into?
I'm thinking, for example, of the various recent OAuth SNAFUs.
- callahad 14y ago> was this conceived from the start with security in mind Absolutely. Point 4 in the Mozilla Manifesto: "Individuals' security on the Internet is fundamental and cannot be treated as optional." (http://www.mozilla.org/about/manifesto.en.html#principles http://www.mozilla.org/about/manifesto.en.html#principles) > is it simple enough as to not be plagued with the countless security issues which product that are too complex inevitably run into? We hope so. Persona's design and implementation have gone through several internal and external audits, and thus far it appears sound. Keeping everything as simple as possible is a core goal.