Featured articles
Archive
Category: OAuth
Public Review of “Financial API – Part 1: Read Only API Security Profile” Has Begun
The OpenID Foundation’s Financial API (FAPI) Working Group has recommended commencing a public review prior to the vote to approve Financial API – Part 1: Read Only API Security Pr…
Financial API — Part 1: Read Only Security Profile Is Undergoing Final Review Before the Implementer’s Draft Vote
The “Financial API — Part 1: Read Only Security Profile”, which is being developed by the OpenID Foundation’s Financial API WG (FAPI WG), is undergoing final review bef…
I Will Speak at API Days Paris on “Financial Grade OAuth and OpenID Connect”
“Automating IT, Business and Society as a Whole with APIs” is the catchphrase of the 1200-person conference “API Days 2016”, which will be held on December 13 and 14 at Tapis Rouge…
WPAD/PAC Attacks Against OAuth and Countermeasures
The WPAD/PAC Attack presented on August 3 at Black Hat 2016, which can read HTTPS URLs, is an attack that makes you think, “Ah, I see.” Instead of attacking HTTPS itself, the…
Open Data in Finance @ London Is on June 15!
Of FinTech’s 3 pillars, APIs are attracting attention as 1 of them. They have become an especially hot topic in Europe because the Payment Service Directive 2 requires banks…
The OpenID Track at CIS Is on Tuesday, June 7
Until last year, the OpenID Track at CIS was held on the pre-conference day, but this year it has been incorporated into the main conference under the title “Achieving Internet Sca…
OAuth PKCE Published as RFC7636
OAuth PKCE (pronounced “pixy”), for which John Bradley (Ping), Naveen Agarwal (Google), and I are credited as co-authors, has been published as [RFC 7636]. It was originally called…
Call for Presentations Opens for OpenID Summit Tokyo 2015
On November 10, OpenID Summit Tokyo 2015 will be held in Iidabashi, Tokyo. The Call for Presentations has now opened[1]. Each presentation will be allotted 20 minutes (15 minutes p…
The XARA Vulnerabilities in MacOS X and iOS
This afternoon (June 18), GigaZine published a sensational article titled “Vulnerability Found That Allows iCloud, Email, and Browser-Saved Passwords to Be Stolen on iOS and OS X;…
How “Numbers” Should Be Designed: Reflections on the Pension Number Leak
Regarding the pension number leak, apparently “all leaked numbers will be changed”. Personally, all I can think is, “Oh dear.” As I wrote in yesterday’s article, if operated approp…
You must be logged in to post a comment.