Question: What makes "security profile" more secure? #404
Comments
|
Using the public oauth_handler you're relying on an application hosted by @yadayada to provide you with the data in the oauth_data, so if for whatever reason you don't trust @yadayada's handling of your secrets to the ACD API, then it could be considered insecure. Handling your own oauth requests however do not have this issue as you communicate directly with Amazon oauth services. |
ShapeShifter499
commented
Sep 7, 2016
•
|
@msh100 Thanks for the quick reply, this makes tons of sense. Maybe this info should be added to the manual/wiki page somewhere. |
yadayada
added the
documentation
label
Sep 7, 2016
yadayada
closed this
in 1921248
Mar 5, 2017
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
ShapeShifter499 commentedSep 7, 2016
I'm looking at https://acd-cli.readthedocs.io/en/latest/authorization.html and I read the following quote. "There is a fast and simple way and a secure way." What makes one way more secure than the other?