If you care about user privacy, don’t use Facebook JavaScript SDK

Re:If you care about user privacy, don’t use Facebook JavaSc... by scarface74 on Monday November 25, 2019 @10:11AM (#21628742)

You don’t bring “experts” on board. Most of them really aren’t. At most, you find a third party trusted managed service.

I work in mostly the B2B space where we integrate with their Identity Providers (active directory, Okta, etc) and strongly discourage them from using our internal authentication system so they have to take responsibility for their own security.

If I were working in the consumer space, I would personally use AWS’s Cognito since that’s what I’m familiar with and it integrates with everything - Google, Facebook, Twitter, Apple, Amazon etc.

I’m sure there are other services that serve similar functions.

[ Parent | on HN ]

Re:If you care about user privacy, don’t use Facebook JavaSc... by r_singh on Monday November 25, 2019 @10:47AM (#21629110)

Hey, I meant to reply on your other comment asking for third party trusted services.

Thanks for listing some, will look into them!

[ Parent | on HN ]

Re:If you care about user privacy, don’t use Facebook JavaSc... by ilikehurdles on Monday November 25, 2019 @11:19AM (#21629563)

Auth0 is another.

[ Parent | on HN ]