Sunday, March 28, 2021

OAUTH v2.1 will mitigate some security holes


Teri Rachel explains why and how we should all follow Amazon's better practice of forbidding Implicit Grants in OAUTH and require proof key for code exchange (PKCE). The Internet is becoming less and less safe.  We all must spend more time and effort defending ourselves.

No comments: