Write up threat analysis

indieweb / indieauth

IndieAuth.net website code and IndieAuth Specification

52 stars 7 forks source link

Write up threat analysis #29

Open aaronpk opened 5 years ago

aaronpk commented 5 years ago

Write up a threat analysis per Speeding Up Security Reviews by Mozilla

Zegnat commented 3 years ago

Now that we are continuously trying to bring IndieAuth more inline with default OAuth, should we consider refering people to the general OAuth threat models?

RFC 6819: OAuth 2.0 Threat Model and Security Considerations
Security Consideration - OAuth 2.0 Simplified