News for hackers. Stuff that matters.

A comment on Web Authentication Methods Compared. Parent comment

Re:Web Authentication Methods Compared by Shmebulock on Wednesday December 23, 2020 @03:42PM (#25521972)
I agree the article is confusing wrt state.

Basic Auth is stateless on the client side but not on the server side.

Token auth is stateless on server side; it does not need to store any more public/private key pairs as the number of authenticating users increases. It can just use one. So authenticating users does not affect state

[ Parent | on HN ]
Re:Web Authentication Methods Compared by combatentropy on Wednesday December 23, 2020 @06:19PM (#25523421)
> it does not need to store any more public/private key pairs as the number of authenticating users increases

That's a good point. Thank you

[ Parent | on HN ]