5 ms·

We condemn anyone that stores passwords as plaintext. Time to treat access tokens as nothing less than a password.

• davidkuridza 13y ago
  How would you store access tokens on a device, using two-way encryption or do you have something else in mind?
  • zaidf 13y ago
    Two way encryption, yep.
    • colinhowe 13y ago
      but then for any reasonable application to be able to use them they'll need to store the unencryption key anyway..
      • tedunangst 13y ago
        Obviously you wouldn't store the encryption key in plaintext...
        • paulgb 13y ago
          It's encrypted keys all the way down.
        • Zancarius 13y ago
          That's easy! We could use two-way encryption to encrypt the encryption key.
      • snarfy 13y ago
        What's wrong with 'correct horse battery staple'?