If you've ever needed a link to send someone to explain why ... • Aaron Parecki

43°F

If you've ever needed a link to send someone to explain why OAuth secrets aren't safe in mobile apps, I made you a thing: https://developer.okta.com/blog/2019/01/22/oauth-api-keys-arent-safe-in-mobile-apps

San Francisco, California, USA • 59°F

Tue, Jan 22, 2019 4:09pm -08:00 #oauth #oauth2 #api #security

13 likes 10 reposts 3 replies
Have you written a response to this? Let me know the URL:
- Soni L. cybre.space/@SoniEx2
  
  @aaronpk idea:
  ... don't use oauth?
  
  Wed, Jan 23, 2019 12:44am +00:00
- alianora cybre.space/@nightpool
  
  @aaronpk ....... who would ever assume this
  
  Wed, Jan 23, 2019 12:32am +00:00
- Darius Kazemi friend.camp/@darius
  
  @aaronpk Heh. As we used to say at the MMORPG company I used to work at: if it's on the client, assume it's compromised.
  
  Wed, Jan 23, 2019 12:24am +00:00

Posted in /notes using quill.p3k.io