Re:OAuth 2.0 Authentication Vulnerabilities
by UncleMeat on Saturday March 27, 2021 @09:50PM
(#26607322)
I mean the former. The primary use case of oauth on the modern web is to support openid connect. So much so that I expect it'll be a "SSL vs TLS" thing in the future where we actually use "oauth" to refer to the entire openid connect flow.
[ Parent
| on HN ]
Re:OAuth 2.0 Authentication Vulnerabilities
by tptacek on Saturday March 27, 2021 @10:19PM
(#26607429)
Sure, OK. But this article really thinking about OAuth authentication in terms of OAuth itself, not OIDC. The dominant use of TCP on the Internet is (I hope?) to fetch URLs, but HTTP is not TCP. :)