News for hackers. Stuff that matters.

A comment on Ask HN: Best way to authenticate for RESTful service?. Parent comment

Re:Ask HN: Best way to authenticate for RESTful service? by haomiao on Wednesday March 12, 2014 @08:15PM (#7389333)
Ok, is the idea that user should log in once on the client device, and the client should not store the password, encrypted or otherwise.

Then all subsequent messages to the server use HMAC for verification?

When does the user need to enter login information again?

[ Parent | on HN ]

There are no comments on this comment yet.