> Is that not a significant issue?
No more an issue than normal.
I don’t see how oauth makes it easier to phish.
The attacker would need to have a fake or compromised site send the victim to another fake site.
No more an issue than normal.
I don’t see how oauth makes it easier to phish.
The attacker would need to have a fake or compromised site send the victim to another fake site.
Splitting hairs if people reuse passwords, but I feel like "don't reuse passwords" is easier to digest for the layman than "check the ssl cert".