A Truckload of OAuth Issues That Would Make Any Author Quit 86
New submitter DeFender1031 writes "Several months ago, when Eran Hammer ragequit the OAuth project, many people thought he was simply being overly dramatic, given that he gave only vague indications of what went wrong. Since then, and despite that, many companies have been switching to OAuth, citing it as a 'superior form of secure authentication.' But a fresh and objective look at the protocol highlights the significant design flaws in the system and sheds some light on what might have led to its creator's departure."
Auth belongs in the browser (Score:5, Insightful)
Re:WTF was that? (Score:3, Insightful)
Because people are, with great gusto, actually using it for what it was never designed to do.