On Mon, Jan 12, 2015 at 8:18 PM, Chris Hartmann <[email protected]> wrote: > Should we solve this? Is it solved already? Could use help gelling or > junking this idea. > > I have a few ideas on how this could be improved/implemented.
I'd be interested to hear them. E.g. at work we started using https://www.okta.com/ to login to a bunch of a services, including e.g. Google services. It felt extremely phishy to give credentials to okta.com to make use of a google.com service. -- https://annevankesteren.nl/ _______________________________________________ websec mailing list [email protected] https://www.ietf.org/mailman/listinfo/websec
