Aaron Parecki

https://linktr.ee/oauth2 - a one-stop list of RFC numbers, nicknames and links to OAuth 2.0 specifications. Quick to scroll and an easy to remember resource for beginners! Good for presentations and for pretending your memory is perfect when making comments at @secworkshop #osw7

More tables! 2/2

The #osw7 dinner in Trondheim - as seen by @aaronpk's 360 camera 1/2

@tlodderstedt comments that this may be for app and BFF and it may not be a good idea to cross the boundary. #osw7

@aaronpk comments back that for the cases with limited backend, we may as well cross the boundary.

Very informative talk > App Integrity Attestations as OAuth Client Authentication
Aaron Parecki #osw7

"not a replacement for a client secret" and other wisdom from @aaronpk at @secworkshop #osw7

Venturing in uncharted territory! @aaronpk addresses the #osw7 crowd about a classic problem, public clients identity @secworkshop

Now @aaronpk is live at @secworkshop #osw7

Our fifth tip for World Password Day comes from @vibronet: "When possible, don’t use passwords at all. With the imminent introduction of FIDO’s multi-device credentials, it will be easier than ever to leave those relics behind. This time, it’s really happening!"

The fact that you can’t tell whether a USB C cable is rated for high power delivery or not just by looking at it is such a failure of the format.

The #osw7 crowd! Thank you all for joining!