SecurityInfoQabout 2 hours ago
Google Adds DPoP to OAuth 2.0
2 min read
Google adopts DPoP for its OAuth platform to strengthen security against token theft and replay attacks. The update applies the mechanism only to refresh tokens to avoid cryptographic overhead for short-lived access tokens. While DPoP protects API tokens, Google and the Web Incubator Community Group are developing Device Bound Session Credentials to address cookie theft vulnerabilities.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
