Hacker News new | ask | show | jobs
by madmaniak 2817 days ago
If the key is attached in link it also should be passed secure way, which is not usually.
2 comments
prophesi 2816 days ago
Yeah, the best solution I've found was Sharelock[0], but I couldn't for the life of me self-host the app without weird errors cropping up. It's also not free if you want more than one social sign-in via Auth0.

[0]: https://sharelock.io/about

link
grezql 2816 days ago
it require login with fb, google, twitter or MS. this does not solve the problem with secure key exchange
link
prophesi 2816 days ago
Do you not trust the OAuth protocol?
link
StefanKarpinski 2817 days ago
The option to also require a pass phrase for decryption would help.
link