News for hackers. Stuff that matters.
Re:Introducing TAuth: Why OAuth 2.0 is bad for banking APIs ... by mgkimsal on Thursday May 05, 2016 @12:02PM (#11637243)
> It's kinda crazy that it has taken so long for someone to actually take an initiative and attempt to make the authentication more secure.

Not when you consider we've all been subjected to decades of "don't write your own security!!!"

Re:Introducing TAuth: Why OAuth 2.0 is bad for banking APIs ... by sjtgraham on Thursday May 05, 2016 @12:11PM (#11637336)
Author here. This is not a new invention. This is standard TLS, and some newer things like WebCrypto brought together.