Hacker News new | ask | show | jobs
by movedx 1915 days ago
> Auth isn't hard

... :-|

Authentication/Authorisation (AuthZ) is hard, brother. Implementing what you think looks like AuthZ is easy, but making sure you've got all possible avenues covered is hard.

Getting AuthZ correct and having everything covered is hard.

Security is hard.

Source: see the entire field of security and all the companies, products and services that have been invented to try and solve this problem.