Guillermo Rauch @rauchg

It’s time to kill “static credentials”. Attacks and breaches can happen. But imagine if thieves could only steal “self-destructing keys” to your data and tokens. The industry once came together to deliver “green locks” encryption for every site (TLS). Let’s do it for OIDC! 💪 [引用 @vercel]: It's time to retire long-lived static credentials. We surveyed 1,000+ SaaS vendors and found only 8.4% support secure auth. This is our call to action and how we're doing our part. https://t.co/yhWnPYeoAX

X9 d ago
Read original ↗