Rabble .
commented on
Oauth RubyIf you look here: http://oauth.net/core/1.0/#signing_process
You’ll see that the secret’s are sent over the wire from the provider to the consumer. But they don’t go the other direction. What would be the point of sending both over the wire to authorize requests. If you were going to send both, you could just send one. The security comes in the separation.8 months ago
Rabble .
commented on
Oauth RubyYou’re wrong here. You send the key’s (tokens) but not the secrets over the wire. You use the secrets in the signing. Sure https is a good idea, but if you’re sending the secrets then you’re doing it wrong.8 months ago
Rabble .
commented on
OAuth OverviewI’m sorry but you’re wrong. OAuth is about Authorization and NOT Authentication. It’s OpenID which is focused on Authentication.8 months ago
Comments