Hacker News Reader

I've thought about this a lot.

I'd love a book on "Web Authentication Systems" that is a survey of approaches, real world examples, tradeoffs of different frameworks, core principles, etc.

View on HN

I wanted this too, very recently. After digging I found out the IANA maintains a list of links to relevant RFCs here: https://www.iana.org/assignments/http-authschemes/http-auths...

This is pretty fascinating, thanks for sharing. Have you used RFCs as a learning tool before? Do they tend to be useful ways of understanding a domain?

Very infrequently. They are definitely useful, though. Rigor and an editing process really helps.

They can be a slog, but the effort is worth it since the information is reliable.

I want to read the newer RFCs around JMAP next.

Reply on news.ycombinator.com