Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

exactly, this looks like the protocol has been intentionally weakened to provide on the wire access. (state actors / telco)

The excuse that they dont want to sign up to the Terms and Conditions holds no water

If they are serious about security adopt OpenID in full (they dont have to join just pass the tests) and put fido2 security key functionality on every Apple device

Apple have made some smart moves but now the marketing dept need to do the right thing for security standards.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: