Hey Jonas! TAuth is simpler than OAuth 2.0 and doesn't suffer the same security ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sjtgraham on May 5, 2016 | parent | context | favorite | on: Introducing TAuth: Why OAuth 2.0 is bad for bankin...

Hey Jonas! TAuth is simpler than OAuth 2.0 and doesn't suffer the same security issues. So… why use OAuth?

jtemplestein on May 5, 2016 | [–]

The devil you know I suppose ;)

IIRC we didn't go too far down the client cert route because we're behind CloudFlare and we like it that way. Something to revisit in the future.

lmm on May 5, 2016 | [–]

The three-legged flow from OAuth is widely needed. (I would agree with sticking to earlier versions that allow more specific tokens though)

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact