Nice work! May I inquire as to the design decision behind storing a hash of the long token server-side for verification of the long token, versus digitally signing the short token plus a nonce and including this…
Looks like this has already been created, back in March? Here's their charter: https://github.com/WebView-CG/charter/blob/main/charter.md This reminds me, back when I used to do app security, one of the issues with…
This seems a tad hyperbolic. And the comparison between encryption and abortion is really weak - the differences are much greater than the parallels. Especially when the author then goes on a tirade about law…
Nice work! May I inquire as to the design decision behind storing a hash of the long token server-side for verification of the long token, versus digitally signing the short token plus a nonce and including this…
Looks like this has already been created, back in March? Here's their charter: https://github.com/WebView-CG/charter/blob/main/charter.md This reminds me, back when I used to do app security, one of the issues with…
This seems a tad hyperbolic. And the comparison between encryption and abortion is really weak - the differences are much greater than the parallels. Especially when the author then goes on a tirade about law…