you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 6 months ago*

It’s ridiculous. It presupposes that cybersecurity doesn’t value or employ defense in depth. Completely untrue.

Look at the attack vector researchers were trying to solve when they created OAuth2.0 w/ PKCE.

  • source
  • parent