Re: [twitter-dev] OAuth:a disaster for Chinese twitter users

2010-02-12 Thread Jesse Stay
On Fri, Feb 12, 2010 at 2:40 AM, Brian Smith wrote: > yegle wrote: > >> Basically, a API proxy script works as a middleman between twitter and >> twitter client, little like man-in-the-middle attack.It's possible to >> do this if the authentication is made in HTTP basic auth.But there is >> no wa

Re: [twitter-dev] OAuth:a disaster for Chinese twitter users

2010-02-11 Thread Brian Smith
yegle wrote: Basically, a API proxy script works as a middleman between twitter and twitter client, little like man-in-the-middle attack.It's possible to do this if the authentication is made in HTTP basic auth.But there is no way to do the same thing with OAuth. The base string of an OAuth reque

Re: [twitter-dev] OAuth:a disaster for Chinese twitter users

2010-02-11 Thread Harshad RJ
Wouldn't a regular HTTPS proxy be sufficient? On Fri, Feb 12, 2010 at 11:00 AM, yegle wrote: > Hi all, > This could be a long email. > > I read Raffi's post today,the original post is here: > > https://groups.google.com/group/twitter-development-talk/browse_thread/thread/c2c4963061422f28 > > I t

[twitter-dev] OAuth:a disaster for Chinese twitter users

2010-02-11 Thread yegle
Hi all, This could be a long email. I read Raffi's post today,the original post is here: https://groups.google.com/group/twitter-development-talk/browse_thread/thread/c2c4963061422f28 I think the abandon of HTTP basic auth would be a disaster for all Chinese twitter users. The gov of China runs