Learn · Track 3

Who are you? (auth)

How does the app know it's me?

Logging in doesn't prove you're you — it proves you hold something
Sep 26
A good app can't email you your own password — that's the feature
Sep 26
The wristband that keeps you logged in — and what happens if someone copies it
Sep 26
"Sign in with Google" never gives the app your Google password — here's the trade
Sep 26
The app knows who you are — that's not the same as what you're allowed to touch
Sep 26