Authorize, don’t authenticate
- The login screen of any web application is the equivalent of that application telling you “In order to access YOUR data in MY database, prove you are who you say you are.
- ” You’re authenticating with the application so that you can have the privilege of giving it your data.
- In a previous blog post, I covered the downside to applications controlling your data.
Unverified
- The login screen of any web application is the equivalent of that application telling you “In order to access YOUR data in MY database, prove you are who you say you are.
- ” You’re authenticating with the application so that you can have the privilege of giving it your data.
- In a previous blog post, I covered the downside to applications controlling your data.
Sources: Marcua