Re:OneLogin: Breach Exposed Ability to Decrypt Data
by vidarh on Friday June 02, 2017 @03:20AM
(#14468103)
That's true, but the SSO service itself can run on the users computer, so there is no need for the service to be able to decrypt the users data, only for it to be able to persist encrypted data.
[ Parent
| on HN ]
There are no comments on this comment yet.