Question: What makes "security profile" more secure? #404

Closed
ShapeShifter499 opened this Issue Sep 7, 2016 · 2 comments

Comments

Projects
None yet
3 participants

I'm looking at https://acd-cli.readthedocs.io/en/latest/authorization.html and I read the following quote. "There is a fast and simple way and a secure way." What makes one way more secure than the other?

Contributor

msh100 commented Sep 7, 2016

Using the public oauth_handler you're relying on an application hosted by @yadayada to provide you with the data in the oauth_data, so if for whatever reason you don't trust @yadayada's handling of your secrets to the ACD API, then it could be considered insecure. Handling your own oauth requests however do not have this issue as you communicate directly with Amazon oauth services.

ShapeShifter499 commented Sep 7, 2016 edited

@msh100 Thanks for the quick reply, this makes tons of sense. Maybe this info should be added to the manual/wiki page somewhere.

yadayada closed this in 1921248 Mar 5, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment