8 ms·
How OAuth 2 trumps Basic authentication
- frankcaron 13y agoA fair assessment of the basic OAuth 2.0 impl, but I'm left wondering how to as-simply state the value add for developers to implement an OAuth 2 workflow instead of just relying on SSL. Is the additional overhead to development worth the gain in security for the straightforward "access my own protected resources" use case?
- bpedro 13y agoAs written in the article, one of the advantages is avoiding things like the man-in-the-middle SSL exploit.