[OAUTH-WG] Some recent FUD about OAuth

[Antonio Sanso]

Just sharing, do not shoot the messenger :)

http://insanecoding.blogspot.com/2016/04/oauth-why-it-doesnt-work-and-how-to-zero-day-attack.html

and companion website:

http://no-oauth.insanecoding.org/

regards

antonio

[Hans Zandbelt]

"JWT is a specification for allowing SSO or API usage between services.
In many ways JWT is like SAML"

makes me stop trying to parse/understand the rest of it

Hans.

Post by Antonio Sanso
Just sharing, do not shoot the messenger :)
http://insanecoding.blogspot.com/2016/04/oauth-why-it-doesnt-work-and-how-to-zero-day-attack.html
http://no-oauth.insanecoding.org/
regards
antonio
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth

[Antonio Sanso]

hi Hans,

indeed I found this article technically inaccurate and it annoyed me quite a bit…

regards

antonio

"JWT is a specification for allowing SSO or API usage between services. In many ways JWT is like SAML"
makes me stop trying to parse/understand the rest of it
Hans.

Post by Antonio Sanso
Just sharing, do not shoot the messenger :)
http://insanecoding.blogspot.com/2016/04/oauth-why-it-doesnt-work-and-how-to-zero-day-attack.html
http://no-oauth.insanecoding.org/
regards
antonio
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth

--
Hans Zandbelt | Sr. Technical Architect

[Hannes Tschofenig]

Antonio,

you should recommend him/her your new OAuth book! This may help to get
some of the misconceptions about OAuth clarified!

Ciao
Hannes

Post by Antonio Sanso
Just sharing, do not shoot the messenger :)
http://insanecoding.blogspot.com/2016/04/oauth-why-it-doesnt-work-and-how-to-zero-day-attack.html
http://no-oauth.insanecoding.org/
regards
antonio
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth