> OAuth is an elaborate scheme for generating and relaying bearer tokens.
😎
😎
From a security perspective, I love tokbind, but I have a feeling it will be too hard to get the TLS layer and the upper application layer(s) of various stacks to share data for it to catch on.
Maybe golang has a chance at that being easy enough to be used
"It is extraordinarily easy to screw up JWT. JWT is a JSON format where you have to parse and interpret a JSON document to figure out how to decrypt and authenticate a JSON document."
