News for hackers. Stuff that matters.

A comment on OAuth Security Cheatsheet.

Re:OAuth Security Cheatsheet by indeyets on Tuesday May 13, 2014 @02:52AM (#7736811)
You missed the obvious: using OAuth2 without TLS =)

And paranoid part of my brain suggests that using OAuth1.0a is still preferred even if over TLS

[ Parent | on HN ]
Re:OAuth Security Cheatsheet by homakov on Tuesday May 13, 2014 @03:02AM (#7736834)
This is another kind of threat but yes, MITM is game over for oauth2
[ Parent | on HN ]