As part of a pre-launch security review, Northfield Retail’s…
As part of a pre-launch security review, Northfield Retail’s own username/password authentication and session-management system — built in house two years ago — comes under scrutiny. The lead engineer checks the existing design against NIST 800-63-B’s digital-identity guidelines rather than guessing at password and session rules, and notes that a managed identity service such as Auth0 would also have been an acceptable choice when the system was first built. True or False: this is a reasonable way to handle digital identity securely.
Read Details