Replies to message #1,306

Yeah, my comments are in the context of HTTPS only (and often services that go over VPNs or at least are only available to IP-whitelisted users).

But if you're using HTTPS, then the entire connection is encrypted at a lower level, so the auth credentials are encrypted too. HTTPS requests...

I should say my primary area is not CS or Math but something that involves both (statistics). I've been applying to internships but I don't think...

The token stuff is just about third-party apps. It's overkill if everything is first-party, meaning you control all the code. In such a case, you...